Date: Thu, 18 Jul 2002 05:30:04 +0000
From: "Matthew Hanson" <[EMAIL PROTECTED]>
Subject: WARNING! Possible virus or hoax?? "Subject: How are you"
I just got the below HTML email posted to my Hotmail mailbox supposedly from
[EMAIL PROTECTED] ... but without [Lib] in the subject line, and no
text for the message. The subject line shows: "How are you", and there are
a few attachments. Smells badly!
------------------------------
Received: from mxout1.netvision.net.il ([194.90.9.20]) by
mc2-f32.law16.hotmail.com with Microsoft SMTPSVC(5.0.2195.4905);
Wed, 17 Jul 2002 20:17:05 -0700
Received: from Hwnigsjjh ([62.0.150.224]) by mxout1.netvision.net.il
(iPlanet Messaging Server 5.2 HotFix 0.7 (built Jun 26 2002))
with SMTP id <[EMAIL PROTECTED]> for
[EMAIL PROTECTED]; Thu, 18 Jul 2002 06:16:32 +0300 (IDT)
Date: Thu, 18 Jul 2002 06:16:05 +0300 (IDT)
Date-warning: Date header was inserted by mxout1.netvision.net.il
From: libretto <[EMAIL PROTECTED]>
Subject: How are you
To: [EMAIL PROTECTED]
Message-id: <[EMAIL PROTECTED]>
MIME-version: 1.0
Content-type: multipart/alternative;
boundary="Boundary_(ID_G/CX6KkI3IPqMyEXXsAY5w)"
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 18 Jul 2002 03:17:05.0684 (UTC)
FILETIME=[97D72D40:01C22E09]
--Boundary_(ID_G/CX6KkI3IPqMyEXXsAY5w)
Content-type: text/html
Content-transfer-encoding: 7BIT
<HTML><HEAD></HEAD><BODY>
<iframe src=cid:M74Q33sJWuu1102v height=0 width=0>
</iframe>
<FONT></FONT></BODY></HTML>
--Boundary_(ID_G/CX6KkI3IPqMyEXXsAY5w)
Content-id: <M74Q33sJWuu1102v>
Content-type: audio/x-midi; name=cla.bat
Content-transfer-encoding: base64
Content-disposition: attachment; filename=cla.bat
TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAA2AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4g
RE9TIG1vZGUuDQ0KJAAAAAAAAAAYmX3gXPgTs1z4E7Nc+BOzJ+Qfs1j4E7Pf5B2zT/gTs7Tn
GbNm+BOzPucAs1X4E7Nc+BKzJfgTs7TnGLNO+BOz5P4Vs134E7NSaWNoXPgTswAAAAAAAAAA
.........<SNIP>.........
--Boundary_(ID_G/CX6KkI3IPqMyEXXsAY5w)
Content-type: TEXT/PLAIN
Content-transfer-encoding: 7BIT
--Boundary_(ID_G/CX6KkI3IPqMyEXXsAY5w)
Content-id: <M74Q33sJWuu1102v>
Content-type: application/octet-stream; name="erik_s[1].jpg"
Content-transfer-encoding: base64
Content-disposition: attachment; filename="erik_s[1].jpg"
/9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAKAAA/+4ADkFkb2JlAGTAAAAA
Af/bAIQADAgICAkIDAkJDBELCgsRFQ8MDA8VGBMTFRMTGBcSFBQUFBIXFxscHhwbFyQkJyck
JDUzMzM1Ozs7Ozs7Ozs7OwENCwsNDg0QDg4QFA4PDhQUEBEREBQdFBQVFBQdJRoXFxcXGiUg
.........<SNIP>.........
--Boundary_(ID_G/CX6KkI3IPqMyEXXsAY5w)--
_________________________________________________________________
Join the world�s largest e-mail service with MSN Hotmail.
http://www.hotmail.com
**************************************************************
http://libretto.basiclink.com - Libretto mailing list
http://www.silverace.com/libretto/ - Archives
-------TO UNSUBSCRIBE-------
Reply to any of the list messages. The reply mail should be
addressed to: [EMAIL PROTECTED] - Then replace any text
on the message's subject line: cmd:unsubscribe
--------TO UNSUBSCRIBE DIGEST------
Do above but with this on subject line: cmd:unsubscribe digest
**************************************************************
