October 28, 2013

Watch out for work at home email scams

October 27, 2013

It's Monday morning and a quick check of my MailWasher Pro recycle bin revealed a slew of work at home scams, with links to websites having .EU extensions. EU represents European domain names. Domain names I have seen are variations of IWillTeachYouToBeRich{3 or 4 characters}.eu/

Many of these domains have already been suspended due to reports from SpamCop, and other spam reporting agencies. The one that is still active at this moment (hosted in China at 111.121.193.200) contains a typical work at home scam promotion, using tons of JavaScript to display a message containing your approximate location. This is known as Geo-targeting. If you live in Chicago, the scam message will say that so and so, a work at home mom, made $8,000 in one month using this program. The copy mentions that you will be working with companies worth over 100 billion dollars.

The landing page is bobby trapped with popup windows to try to prevent you from leaving the site, unless you agree to sign up, or completely close your browser. The payload is a link to purchase "Home Income Kit." This is a money mule scam run by professional con men. People who buy these useless info packs are then solicited to become "mules" in a money laundering or stolen goods reshipper racket.

Sidenote: I write custom spam filters for MailWasher Pro. My filters detect and auto-delete such scams and many others.

Note, all of these work at home websites are blocked by Trend Micro Internet Security programs, which I use and recommend. Even if you knowingly try to visit these pages, Trend's browser protection module blocks them with this unmistakeable notice: "Trend Micro has confirmed that this website can transmit malicious software or has been involved in online scams or fraud."

Facebook Twitter LinkedIn Pinterest Instapaper Google+ Addthis

back to top ^

October 6, 2013

Wizcrafts' MailWasher Pro spam filters updated today

October 6, 2013

Today, October 6, 2013, I published a large update of my custom spam filters for MailWasher Pro, a desktop and mobile device spam-filtering program.

Normally, I may update a couple of my spam filters a week and create a new filter once a month. However, due to a sudden enormous increase in the amount of spam for pharmaceuticals, plus malicious messages, I have created 5 new spam filters and changed the names of two existing filters.

The new filters deal specifically with new botnet spam templates used to promote the fake "My Canadian Pharmacy," along with other fake pharmacies selling illicit prescription drugs and useless diet capsules. Also, I created a new filter to detect a variation of a malware link scam.

New Spam Filters

My new anti-spam filters published during this calendar week are as follows.


  1. CNBC Diet Scam (Green Coffee herbals) (Yuk!)

  2. Fake Pharmacy Spam ("My Canadian Pharmacy")

  3. Empty Return-path

  4. Outlook.com & WhatCounts

  5. USPS Delivery Scam (Courier scam with malicious links to exploit kits)

Changed Name Filters:


  1. "Possible Pump and Dump Scam" renamed to "Empty Return-Path"

  2. "URL Shortener Link" (new xml filter version) to "URL shortener, or 2 digit country code link"

  3. "URL Shortener (Spam) Link" (old version 6) renamed to: "URL shortener, or 2 digit country code link"


My anti-spam filters will detect, flag, or auto-delete over 80% of the spam a typical email recipient receives. This number is from my own MailWasher Pro Recycle Bin logs.

Note, that I already have a published spam filter that detects anything spoofing CNN news. The last few days has seen a huge influx of fake "CNN News Daily" email scams with links to (mostly) Russian websites that sell the green coffee extract crap. The latest round have the subject: "Slim Secret Shop." My spam filters delete them automatically.

What MailWasher is and is not capable of doing.

MailWasher Pro is a desktop, or mobile device spam-filtering application that receives email from POP3 and IMAP email servers to which you have been granted access. The program scans the headers and message body contents to determine if the message is legitimate, or is or may be spam. While the program contains a strong learning filter and other optional anti-spam tools (e.g. blacklists), the ability to craft custom spam filters makes it stand out.

Legal Disclaimer:
I have been a happy user of MailWasher Pro since its inception. Now, I am both a customer and an affiliate. I earn commissions whenever somebody buys into the program through my affiliate links.

That said, I'm not trying to scam anybody into purchasing MailWasher Pro. Maybe you have a different spam filter solution, or are stuck using browser-based web-mail. MailWasher can't help people who use http web-mail through their web browsers. It is strictly for POP3 and IMAP email where you use a desktop or mobile email application to send and receive messages over the POP3 or IMAP protocols. People using desktop email clients like Windows Live Mail, Outlook, Outlook Express (deprecated by Microsoft), or a similar stand alone email program, can benefit from running MailWasher Pro ahead of their email client. I set MailWasher to check for new mail every 10 or 12 minutes, but turn off automatic checking in Windows Live Mail. Only after MailWasher has deleted any spam or unnecessary email, do I download legitimate messages into Windows Live Mail.

I won't bore you with all of the details; you can read them yourself, here. They offer a 90-day, no questions asked money back guarantee, if you aren't happy with the program.

Facebook Twitter LinkedIn Pinterest Instapaper Google+ Addthis

back to top ^

October 2, 2013

Comcast Voice users: How to block 24 phone numbers on Comcast.net

October 3, 2013

If you use Comcast Voice services, you are allowed to block just 12 unwanted phone numbers. For most of us, those numbers will be telemarketers. This short article shows you how to block an additional 12 numbers, using the online Comcast.net portal.

You may wonder why you get so many unwanted telemarketing phone calls, even though you have signed up your numbers on the Do Not Call Registry (www.donotcall.gov). The reason is that the people hiring the telemarketers and Robo-callers make much more money in commissions than the fees to make these calls and any fines they face if caught and prosecuted. Ditto for the telemarketing boiler rooms.

So, say you subscribe to Comcast for your home phone service and you are pestered by a lot of telemarketers. You can add their phone numbers to a block list, one at a time, as they come in, via a sequence of keystrokes. Or, you can login to your Comcast.net online account and add these phone numbers to a blocked callers list. That is, until 12 phone numbers have been saved. After that you'll have to delete numbers to add new ones to the Blocked Callers list.

Twelve blocked telemarketers ain't nothin' folks! I know it and you know it. Those pesky bastards keep calling from new numbers as the old ones get blocked by major carriers, or due to occasional action by the FTC. But, blocking 24 numbers would be much more effective, at least for a few months. I'll show you how to do this further in this article.

The first thing you need to know is the sequence of steps you must take to get to the web page where unwanted numbers can be blocked. To do this you must have an online account with Comcast.net. All Comcast customers are entitled to an online account where they can manage their voicemail preferences, review calls taken or missed, add numbers to the block list, add email accounts, read, compose and send email, make payments, change service, etc. This all begins with a visit to http://xfinity.comcast.net.

If you haven't already done so, go to http://xfinity.comcast.net/ and look to the left side of the web page, where these words are inside a box, with a Sign In button below them:

"Uh-oh, you're not signed in. You must sign in to access your account and sync your XFINITY services with your homepage."

Clicking on the "SIGN IN" button takes you to a login page where you must type in either your Comcast email address, if you subscribe to their cable Internet service, or your chosen "username." All Comcast Internet service accounts are assigned a master email account on comcast.net, with a name and password that is chosen when you start your service, or activate the cable modem. This information is included on the original Internet service contract. If you forget what it is and can't find the original contract, call Comcast at 1-877-842-6622. You'll need to prove that you are the account owner to proceed.

There is a place below the login form where you can choose a personal user name for your Comcast online account, whether you use Comcast Internet or not. It is labeled:
"Need Access?"
"Create a Username" (a clickable link).
The page notifies you that you need to list the physical address where the Comcast service you wish to manage is connected, even if you are not at home. Type in the address, including any apartment, unit, suite, or lot number, etc and click Next. If there is already an email account setup for this address, it (or they) will be listed on the page that loads. If not, there is a link below it to "create a username." Follow the steps on the next page, until your username and password has been saved.

Once you have either a Comcast.net email account and password, or a username and password, login, back at http://xfinity.comcast.net/, where there is a Sign in button on the top right corner, as well as a link labeled: My Account, on the left.

The first Dirty Dozen

When you are signed in, click on the left sidebar link labeled: Voice and Text. On the next page, click on the tab labeled Preferences, then on Voice. Find the link labeled "Call Blocking" and click on it. Choose if you want to check the "Block all anonymous calls" option (calls with a blocked Caller ID), then move down and begin adding the area code and phone number of each unwanted caller (from your phone's callers list). There is a page where all received or missed calls are listed and you can add calls from that list to the blocked calls list, by clicking on the Call Screening link. Changes are saved automatically as they are added, or deleted.

Numbers on the Call Blocking list don't ring on your Comcast service phone. They go to a bit-bucket somewhere.

The second Dirty Dozen

To block another 12 numbers, click on the link on the same Voice Preferences page labeled: "Call Forwarding and Rings." It opens a section where the magic happens. Under "Selective Call Forwarding" is a button labeled: "Add." Clicking on it opens a small text box where you can enter a phone number (w/ area code) to forward to a second number. This is where you can list your final 12 unwanted callers, sending them to a different number than yours. I won't tell you what number I forward these telemarketers to, but it belongs to another, very persistent security system telemarketer, whose number is already on my blocked calls list.

The system will not allow you to add certain prefixes to the Selective Call Forwarding list. In those cases I will copy, then delete a normal number from my blocked calls list and add the one that couldn't be forwarded to that list. Then, I'll go back and add the allowable number to the forwarded calls list.

Numbers on the Selective Call Forwarding list will ring just one short ring on your Comcast service phone. You'll hardly notice it.

Eventually, all 24 slots will be filled, between blocked and selectively forwarded calls. At that time you have to remove old numbers to make room for new ones. Or, buy one of the newer landline phones with call blocking, or a stand alone call blocker device. That is my next step in my war with telemarketers who willfully disregard the numbers listed on the Do Not Call Registry.

Facebook Twitter LinkedIn Pinterest Instapaper Google+ Addthis

back to top ^

Blog Links

Sponsored Message

I recommend Malwarebytes to protect your computers and Android devices from malicious code attacks. Malwarebytes detects and blocks spyware, viruses and ransomware, as well as rootkits. It removes malware from an already infected device. Get an 18 month subscription to Malwarebytes here.

If you're a fan of Robert Jordan's novels, you can buy boxed sets of The Wheel Of Time, here.

As an Amazon and Google Associate, I earn commissions from qualifying purchases.


CIDR to IPv4 Address Range Utility Tool | IPAddressGuide
CIDR to IPv4 Conversion



About the author
Wiz FeinbergWiz's Blog is written by Bob "Wiz" Feinberg, an experienced freelance computer consultant, troubleshooter and webmaster. Wiz's specialty is in computer and website security. Wizcrafts Computer Services was established in 1996.

I produce this blog and website at my own expense. If you find this information valuable please consider making a donation via PayPal.

Follow @Wizcrafts on Twitter, where I post short updates on security issues, spam trends and things that just eat at my craw.

Follow Wizcrafts on Twitter


Malwarebytes' Anti-Malware is the most frequently recommended malware removal tool in malware removal forums, like Bleeping Computers. It is extremely effective for removing fake/rogue security alerts, Bots, Spyware and the most prevalent and current malware threats in the wild. Learn about Malwarebytes Anti-Malware.


MailWasher Pro is an effective spam filter that protects your desktop email client. Using a combination of blacklists and built-in and user configurable filters, MailWasher Pro recognizes and deletes spam before you download it. MailWasher Pro reveals the actual URL of any links in a message, which protects you from most Phishing scams. Try it free for 30 days.





Creative Commons License This weblog is licensed under a Creative Commons License.
The content on this blog may be reprinted provided you do not modify the content and that you give credit to Wizcrafts and provide a link back to the blog home page, or individual blog articles you wish to reprint. Commercial use, or derivative work requires written permission from the author.
Powered by Movable Type

back to top ^