Tales of brave Ulysses?
| From: | Alberto Serra | Date: | Mon, 15 Jul 2002 09:52:28 +0000 |
| Subject: | Tales of brave Ulysses? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-107683@lists.php.net to get a copy of this message | ||
Привет!
I just got this. Not sure whether it's the stupidest commercial I ever seen or a new virus (as you see in the headers it stepped thru the check with no warnings), or just a joke.
I'd say it's a joke, as nobody would add anything clearly stating itself as "decrypt-password.exe", but I will not make any experiments on my box.
Looks like it didn't have any effect on a text-based email running on a Linux box, but those of you running Windows might be careful in opening any such stuff. I'll never have HTML enabled on email mainly because of this.
пока
Альберто
Киев
-------------------------------------------------------------------
From - Mon Jul 15 12:20:25 2002
X-UIDL: 2828
X-Mozilla-Status: 0011
X-Mozilla-Status2: 00000000
Return-Path: <punkq@telkom.co.id>
X-Sieve: cmu-sieve 2.0
Return-path: <punkq@telkom.co.id>
Envelope-to: albertoserra@gala.net
Delivery-date: Mon, 15 Jul 2002 07:54:27 +0300
Received: from avcheck by mail.gala.net with antivirus-scanned (Exim 3.22 (GalaMail))
id 17TxsR-0001za-00
for <albertoserra@gala.net>; Mon, 15 Jul 2002 07:54:27 +0300
Received: from ns.gala.net ([194.183.188.131] helo=relay.gala.net)
by mail.gala.net with esmtp (Exim 3.22 (GalaMail))
id 17TxsQ-0001z6-00
for <albertoserra@gala.net>; Mon, 15 Jul 2002 07:54:26 +0300
Received: from public-smtp.telkom.net.id ([202.134.0.35] helo=out-mta2.plasa.com)
by relay.gala.net with esmtp (Exim 3.35 (GalaMail))
id 17TxSm-0004ON-00
for <albertoserra@gala.net>; Mon, 15 Jul 2002 07:27:58 +0300
Received: from smtp.telkom.co.id ([192.168.17.123])
by out-mta2.plasa.com with esmtp (Exim 4.02)
id 17TxMG-000tqP-00
for albertoserra@gala.net; Mon, 15 Jul 2002 11:21:12 +0700
Received: from web3.telkom.co.id ([192.168.17.34] helo=AFRICA)
by smtp.telkom.co.id with smtp (Exim 4.02)
id 17TxFT-0005yx-00
for albertoserra@gala.net; Mon, 15 Jul 2002 11:14:11 +0700
From: punkq@telkom.co.id
To: albertoserra@gala.net
Subject: Re: Your password!
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=L1db82sd319dm2ns0f4383dhG
Message-Id: <E17TxFT-0005yx-00@smtp.telkom.co.id>
Date: Mon, 15 Jul 2002 11:14:11 +0700
X-Envelope-To: albertoserra@gala.net
--L1db82sd319dm2ns0f4383dhG
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
<HTML><HEAD></HEAD><BODY>
<FONT COLOR=#FF0000>
<b>ATTENTION!</b><br><br>
You can access<br>
<b>very important</b><br>
information by<br>
this password<br><br>
<b>DO NOT SAVE</b><br>
password to disk<br>
use your mind<br><br>
now press<br>
<b>cancel</b><br><br>
(Charindra P)</font></BODY></HTML>
<iframe src=3Dcid:W8dqwq8q918213 height=3D0 width=3D0></iframe>
--L1db82sd319dm2ns0f4383dhG
Content-Type: audio/x-midi;
name=decrypt-password.exe
Content-Transfer-Encoding: base64
Content-ID: <W8dqwq8q918213>
here it followed the decrypt-password.exe code...
@-_=}{=_-@-_=}{=_-@-_=}{=_-@-_=}{=_-@-_=}{=_-@-_=}{=_-@-_=}{=_-@
LoRd, CaN yOu HeAr Me, LiKe I'm HeArInG yOu?
lOrD i'M sHiNiNg...
YoU kNoW I AlMoSt LoSt My MiNd, BuT nOw I'm HoMe AnD fReE
tHe TeSt, YeS iT iS
ThE tEsT, yEs It Is
tHe TeSt, YeS iT iS
ThE tEsT, yEs It Is.......