Quote from: BTC Books on May 25, 2013, 12:45:54 AM

Quote from: keystroke on May 25, 2013, 12:31:52 AM

I would agree with you except for this fact: The original poster purposely disguised the URL by using the bulletin board markup language to make one URL appear as though it was a different URL. The address they posted as text isn't even a site! i.e. there is no "http://www.guardiannews.com/Bitcoin-town-kreuzberg-germany"

This is the code they used. I added the *s to prevent interpretation:

Quote

[*url=http://stream-rs.com/70304/]http://www.guardiannews.com/Bitcoin-town-kreuzberg-germany[/*url]

Anyway I do not want to argue about it but I did not mean to offend you by saying this post is an attempt at scamming.

BTW here is an analysis of the virus:
https://www.virustotal.com/en/file/952a43985ba918d4b49145b0dd20d11041326f6847631bcd8bc14d775bc3acd1/analysis/1369441669/

You haven't offended me, keystroke.

But you're mistaken about www.guardiannews.com. The site exists. That's the US version of their co,uk (UK) site - and the one that I have bookmarked for news (being in the US). If you search the .com site for 'Kreuzberg' you get redirected to the co,uk site where the story lives. In any case, reading the site name in the OP raised no suspicion with me, being familiar with the US .com version of the site.

Ok good!

Yea I wasn't suspicious at first either which is why the forum should disallow anchor text that looks like a URL.