I received another EXE base64 attachment from [EMAIL PROTECTED], did anybody
else get that spam? Excerpt from the header:
From: Hahaha <[EMAIL PROTECTED]>
Subject: Snowhite and the Seven Dwarfs - The REAL story!
Attachment name was joke.exe first time, dwarf4you.exe this time. Bluegrass Net
converts .exe to ~exe and .vbs to ~vbs, so a carelsss user won't run a possible
virus accidentally, but a user will be able to rename the file or edit the raw
data of the email message if he/she really wants to run the program.
Now it is very unlikely this attachment would run under DOS, since the file name
is one character too long (dwarf4you.exe). It can be assumed the attachment was
intended for an OS that supports long file names, like 32-bit Windows.
The message before the attachment was badly spelled:
Today, Snowhite was turning 18. The 7 Dwarfs always where very educated and
polite with Snowhite. When they go out work at mornign, they promissed a
*huge* surprise. Snowhite was anxious. Suddlently, the door open, and the Seven
Dwarfs enter...
----VE7SLEVWT6JG5U30D2J
Content-Type: application/octet-stream; name="dwarf4you~exe"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="dwarf4you~exe"
TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
(snip!)
