HTMLZip 'compressed' HTML mail - virus or spam ?!?!

From: Doru Petrescu (pdoru@kappa.ro)
Date: 09/14/01


Date: Fri, 14 Sep 2001 13:11:04 +0300 (EEST)
From: Doru Petrescu <pdoru@kappa.ro>
To: <vuln-dev@securityfocus.com>
Subject: HTMLZip 'compressed' HTML mail - virus or spam ?!?!
Message-ID: <Pine.LNX.4.31.0109141302400.19231-200000@linux.kappa.ro>



Hi everybody,

This morning I received a message with subject 'AMERICA UNDER ATTACK' that
contains a HTML part that contains some obfuscated JavaScript.

This could be a virus or a SPAM (but I never seen such an obfuscated spam
msg till now)

if someone take the time to decript and analize please post result to the
list.

Best regards,
Doru Petrescu