Home Phishing HornyGirlHere Phishing E-mail

HornyGirlHere Phishing E-mail

Posted: September 26, 2011

'HornyGirlHere' phishing email is a symptom of a 'HornyGirlHere' attack that, so far, focuses its efforts on Facebook profiles. By adding itself to your contact lists for both e-mail clients and Facebook, 'HornyGirlHere' phishing email scams try to steal information, such as other e-mail addresses that can be hijacked and used for various crimes. As long as you're aware of 'HornyGirlHere' Phishing E-mails and how to avoid them, SpywareRemove.com malware experts rate the chances of infection as minimal. However, if you do find that you're coming into serious contact with 'HornyGirlHere' phishing email attacks, you should take appropriate action and immediately scan over your PC with anti-malware program, along with taking the other security steps that are suggested in this article.

Symptoms of 'HornyGirlHere' phishing email Trying to Snatch Your Contact Info

'HornyGirlHere' phishing email attacks often begin with messages like the following one:

"Hornygirlhere Hasn’t received a gift yet. Be the first to get them one!"

'HornyGirlHere' phishing email messages can use these fake 'gift' requests to convince you to visit harmful sites that attempt to steal account information or install harmful security program, such as browser hijackers, keyloggers or dropper Trojans. You can delete 'HornyGirlHere' phishing email infections with suitable anti-malware programs and, if you've clicked a 'HornyGirlHere' phishing email link, you should assume that your PC is infected.

'HornyGirlHere' phishing email also has a second way to steal your info, by bombarding you with friend requests and group invites. SpywareRemove.com malware experts have found that ignoring these invitations can allow 'HornyGirlHere' phishing email attackers to have limited access to your profile and e-mail account. If you have a 'HornyGirlHere' phishing email friend or group invitation, reject the invitation; if you've already accepted the invitation by accident, immediately remove the 'HornyGirlHere' group from your contact list. Removing the baseline 'HornyGirlHere' group is the only way to remove the 'HornyGirlHere' contact.

Pushing This Unwanted 'HornyGirlHere' Back Down After She Pops Up

The aftermath of a 'HornyGirlHere' phishing email attack shows itself in two primary ways, one for your Facebook account and another, broad attack that targets your e-mail accounts.

  • 'HornyGirlHere' will add itself to your forwarding list for e-mail accounts (such as Hotmail). This allow 'HornyGirlHere' phishing email criminals to gather private information, such as other e-mail addresses that are on your forwarding list and attack them in turn.
  • 'HornyGirlHere' will appear on your contact list in Facebook and may spam you with harmful links like the message that was noted earlier.

If you avoid giving away private information to these fake friends and take the recommended steps to get rid of 'HornyGirlHere,' you should have no other problems. However, SpywareRemove.com malware researchers encourage haste when undoing a 'HornyGirlHere' phishing email attack, since delay may allow 'HornyGirlHere' phishing email attackers to hijack your account, expose you to harmful links or collect your contact information.

Technical Details

File System Modifications

The following files were created in the system:



C:\WINDOWS\Minidump\random.dmp File name: C:\WINDOWS\Minidump\random.dmp
Mime Type: unknown/dmp
C:\Users\<username>\AppData\Local\Temp\random.xml File name: C:\Users\<username>\AppData\Local\Temp\random.xml
Mime Type: unknown/xml
%AllUsersProfile%\Application Data\.dll File name: %AllUsersProfile%\Application Data\.dll
File type: Dynamic link library
Mime Type: unknown/dll
%AllUsersProfile%\Application Data\.exe File name: %AllUsersProfile%\Application Data\.exe
File type: Executable File
Mime Type: unknown/exe

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ""HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ".exe"
Loading...