>Someone sent it to me, did a *very* expert insertion leaving fewer
>header lines than normally even local mail has.
>
>Needless to say, being a DOSasaur has its benefits. I sent headers to
>ISP and zipped up the worm with password protection.
>
>Anyone want to trash their own dozerware? Just wait, you may be next.
>
>l.d.
I got one too, blank return-path, two-part message, no subject, first part was
text/plain but blank, second part was base64-encoded MKCCGENK.EXE. My ISP
converts .EXE and .VBS in attachments to ~EXE and ~VBS to prevent a user from
inadvertently running a viral or Trojan attachment. But about 8 days previous,
I received another message
From: Hahaha <[EMAIL PROTECTED]>
Subject: Snowhite and the Seven Dwarfs - The REAL story!
with an attachment sexy virgin.scr. I decoded that just for curiosity, to see
if I could read it (script file?), it began with MZ (just like an EXE?) but was
not a human-readable text file. Anybody know what Win32 application runs
non-text .scr files? Three days ago, I received another Snowhite message, this
time with joke.exe attached. Snowhite is falling in love with me (?) By the
way, sexyfun.net domain actually exists, as I found by running OS/2 tracerte.
This is what the MKCCGENK.EXE message looked like, with nary a clue what it is
supposed to be:
Return-Path: <>
Received: from A ([212.253.181.137])
by w3.bluegrass.net (8.9.3/8.9.3) with SMTP id IAA13837
for <[EMAIL PROTECTED]>; Fri, 12 Jan 2001 08:02:46 -0500 (EST)
Date: Fri, 12 Jan 2001 08:02:46 -0500 (EST)
Message-Id: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="--VEGTQVG1M3W9YJKT6ZOPQ3CX2FS1YVW9"
Status:
----VEGTQVG1M3W9YJKT6ZOPQ3CX2FS1YVW9
Content-Type: text/plain; charset="us-ascii"
----VEGTQVG1M3W9YJKT6ZOPQ3CX2FS1YVW9
Content-Type: application/octet-stream; name="MKCCGEMK~EXE"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="MKCCGEMK~EXE"
TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAgAAAALRMzSEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
(350 lines snipped)
