On Feb 4, 2008 3:50 PM,  <[EMAIL PROTECTED]> wrote:
> Destiny http://86.31.249.90/
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>


I've decoded the secret message
'%3C%61%20%68%72%65%66%3D%22%77%69%74%68%5F%6C%6F%76%65%2E%65%78%65%22%3E%0D%0A'!

I sent this with_love.exe to virustotal to see what they thought.
Antivirus       Version Last Update     Result
AhnLab-V3       2008.2.5.10     2008.02.04      -
AntiVir 7.6.0.62        2008.02.04      Worm/Zhelatin.ow
Authentium      4.93.8  2008.02.04      -
Avast   4.7.1098.0      2008.02.04      -
AVG     7.5.0.516       2008.02.04      I-Worm/Nuwar.L
BitDefender     7.2     2008.02.04      Trojan.Peed.ITU
CAT-QuickHeal   9.00    2008.02.04      Win32.Email-Worm.Zhelatin.uq
ClamAV  0.92    2008.02.04      Trojan.Dropper-3840
DrWeb   4.44.0.09170    2008.02.04      Trojan.Packed.336
eSafe   7.0.15.0        2008.01.28      Suspicious File
eTrust-Vet      31.3.5509       2008.02.04      Win32/Sintun!generic
Ewido   4.0     2008.02.04      -
FileAdvisor     1       2008.02.04      -
Fortinet        3.14.0.0        2008.02.04      W32/PackTibs.L
F-Prot  4.4.2.54        2008.02.04      W32/Zhelatin.D.gen!Eldorado
F-Secure        6.70.13260.0    2008.02.04      Tibs.gen193
Ikarus  T3.1.1.20       2008.02.04      -
Kaspersky       7.0.0.125       2008.02.04      Email-Worm.Win32.Zhelatin.uq
McAfee  5222    2008.02.04      W32/[EMAIL PROTECTED]
Microsoft       1.3204  2008.02.04      Backdoor:Win32/Nuwar.gen!B
NOD32v2 2847    2008.02.04      Win32/Nuwar.Gen
Norman  5.80.02 2008.02.04      Tibs.gen193
Panda   9.0.0.4 2008.02.04      -

Additional information
File size: 131072 bytes
MD5: b017e37acf8c025469a50a3286ab40d8
SHA1: be7dae98611f864335f8f0f58e7dd356f031640b
PEiD: -

:(

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to