萌え萌えウイルスたんヽ(´ー`)ノ
- 1 名前： にしやま 投稿日：2004/01/07(水) 13:40 ID:???
- ウイルスメールを展示します。
- 2 名前： にしやま 投稿日：2004/01/07(水) 13:44 ID:???
- W32.Swen.A@mm その１
---------------------
Received: from XXXXX.or.jp (XXXXX [2XX.24X.19X.12X])
by mx1.XXXXX.or.jp (8.9.3p2/3.7W) with ESMTP id JAA19988;
Wed, 7 Jan 2004 09:12:08 +0900 (JST)
Received: from mail3.XXXXX.or.jp
by XXXXX.or.jp (3.7W/HMX-13) id JAA22631;
Wed, 7 Jan 2004 09:12:07 +0900 (JST)
Received: from ozatryq (pl144.nas511.k-tokyo.nttpc.ne.jp [210.165.64.144]) by mail3.XXXXX.or.jp (8.9.3/3.7W)
id JAA11104; Wed, 7 Jan 2004 09:11:04 +0900 (JST)
Date: Wed, 7 Jan 2004 09:11:04 +0900 (JST)
Message-Id: <200401070011.JAA11104@mail3.XXXXX.or.jp>
FROM: "Technical Bulletin" <lbbglegtja-jejtfxyb@updates.msn.net>
TO: "Consumer" <consumer_jmubbyiqf@updates.msn.net>
SUBJECT: New Patch
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="cicydkijgloaulms"
X-UIDL: fb231b784841cdeb5c4733a0a0261227
X-EdMax-Attachment-File: 20040107_101013_460anh\Attach$_01.html,
20040107_101013_460anh\Attach$_01.gif,
20040107_101013_460anh\Attach$_02.gif,
20040107_101013_460anh\installation54.exe,
X-EdMax-Status: 0
Microsoft Consumer
this is the latest version of security update, the
"January 2004, Cumulative Patch" update which fixes
all known security vulnerabilities affecting
MS Internet Explorer, MS Outlook and MS Outlook Express
as well as three newly discovered vulnerabilities.
Install now to help maintain the security of your computer.
This update includes the functionality of all previously released patches.
System requirements: Windows 95/98/Me/2000/NT/XP
This update applies to:
- MS Internet Explorer, version 4.01 and later
- MS Outlook, version 8.00 and later
- MS Outlook Express, version 4.01 and later
Recommendation: Customers should install the patch at the earliest opportunity.
How to install: Run attached file. Choose Yes on displayed dialog box.
How to use: You don't need to do anything after installing this item.
- 3 名前： にしやま 投稿日：2004/01/07(水) 15:49 ID:???
- W32.Swen.A@mm その２
---------------------
Received: from XXXXXX.or.jp (XXXXX [XXX.XXX.XX.XXX])
by mx1.XXXXXX.or.jp (8.9.3p2/3.7W) with ESMTP id JAA24729;
Wed, 7 Jan 2004 09:16:37 +0900 (JST)
Received: from mail6.XXXXXX.or.jp
by XXXXXX.or.jp (3.7W/HMX-13) id JAA23071;
Wed, 7 Jan 2004 09:16:37 +0900 (JST)
Received: from ncju (pl144.nas511.k-tokyo.nttpc.ne.jp [210.165.64.144]) by mail6.XXXXXX.or.jp (8.9.3/3.7W)
id JAA21908; Wed, 7 Jan 2004 09:15:33 +0900 (JST)
Date: Wed, 7 Jan 2004 09:15:33 +0900 (JST)
Message-Id: <200401070015.JAA21908@mail6.XXXXXX.or.jp>
FROM: "Public Support" <vofkxydbdhcfm_ttkhpmw@bulletin.com>
TO: "Customer" <eepsi-okmiyust@bulletin.com>
SUBJECT: Internet Upgrade
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="ossuaqzrukhwkw"
X-UIDL: ed1bb2259b0e7fd5949b419eae4337b9
X-EdMax-Attachment-File: 20040107_101019_rpp6tt\Attach$_01.html,
20040107_101019_rpp6tt\Attach$_01.gif,
20040107_101019_rpp6tt\Attach$_02.gif,
20040107_101019_rpp6tt\q268893.exe,
X-EdMax-Status: 0
Microsoft Customer
this is the latest version of security update, the
"January 2004, Cumulative Patch" update which fixes
all known security vulnerabilities affecting
MS Internet Explorer, MS Outlook and MS Outlook Express.
Install now to help protect your computer
from these vulnerabilities, the most serious of which could
allow an attacker to run code on your computer.
This update includes the functionality of all previously released patches.
Microsoft Product Support Services and Knowledge Base articles can be found on the Microsoft Technical Support web site.
http://support.microsoft.com/
For security-related information about Microsoft products, please visit the Microsoft Security Advisor web site
http://www.microsoft.com/security/
Thank you for using Microsoft products.
Please do not reply to this message.
It was sent from an unmonitored e-mail address and we are unable to respond to any replies.
----------------------------------------------
The names of the actual companies and products mentioned herein are the trademarks of their respective owners.
Copyright 2004 Microsoft Corporation.
- 4 名前： にしやま 投稿日：2004/01/07(水) 16:06 ID:???
- W32.Swen.A@mm その３
---------------------
Received: from XXXXX.or.jp (XXXXX [XXX.XXX.XXX.XXX])
by mx1.XXXXX.or.jp (8.9.3p2/3.7W) with ESMTP id NAA25337;
Tue, 6 Jan 2004 13:05:08 +0900 (JST)
Received: from mail5.XXXXX.or.jp
by XXXXX.or.jp (3.7W/HMX-13) id NAA21805;
Tue, 6 Jan 2004 13:05:07 +0900 (JST)
Received: from mlozx (pl061.nas511.k-tokyo.nttpc.ne.jp [210.165.64.61]) by mail5.XXXXX.or.jp (8.9.3/3.7W)
id NAA18966; Tue, 6 Jan 2004 13:03:40 +0900 (JST)
Date: Tue, 6 Jan 2004 13:03:40 +0900 (JST)
Message-Id: <200401060403.NAA18966@mail5.XXXXX.or.jp>
FROM: "Technical Support" <gzikffrpveqlku-ltfzcup@advisor.msn.com>
TO: "Customer" <customer-rgibwwe@advisor.msn.com>
SUBJECT: net security pack
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="numlzkxgvclgckl"
X-UIDL: 49bb7a8daed6a291b9635308038ecf45
X-EdMax-Attachment-File: 20040106_131007_d0wamm\Attach$_01.html,
20040106_131007_d0wamm\Attach$_01.gif,
20040106_131007_d0wamm\Attach$_02.gif,
20040106_131007_d0wamm\Q289924.exe,
X-EdMax-Status: 0
Microsoft Customer
this is the latest version of security update, the
"January 2004, Cumulative Patch" update which resolves
all known security vulnerabilities affecting
MS Internet Explorer, MS Outlook and MS Outlook Express
as well as three new vulnerabilities.
Install now to maintain the security of your computer
from these vulnerabilities, the most serious of which could
allow an malicious user to run executable on your computer.
This update includes the functionality of all previously released patches.
Microsoft Product Support Services and Knowledge Base articles can be found on the Microsoft Technical Support web site.
http://support.microsoft.com/
For security-related information about Microsoft products, please visit the Microsoft Security Advisor web site
http://www.microsoft.com/security/
Thank you for using Microsoft products.
Please do not reply to this message.
It was sent from an unmonitored e-mail address and we are unable to respond to any replies.
----------------------------------------------
The names of the actual companies and products mentioned herein are the trademarks of their respective owners.
Copyright 2004 Microsoft Corporation.
- 5 名前： にしやま 投稿日：2004/01/07(水) 16:20 ID:???
- W32.Swen.@mm その４
その2,その3,その4 は SUBJECT と、添付ファイル名以外は同じようです。
---------------------
Received: from XXXXX.or.jp (XXXXX [XXX.XXX.XXX.XXX])
by mx1.XXXXX.or.jp (8.9.3p2/3.7W) with ESMTP id KAA06360;
Tue, 6 Jan 2004 10:02:38 +0900 (JST)
Received: from mail6.XXXXX.or.jp
by XXXXX.or.jp (3.7W/HMX-13) id KAA03861;
Tue, 6 Jan 2004 10:02:29 +0900 (JST)
Received: from uvchbqjn (pl022.nas511.k-tokyo.nttpc.ne.jp [210.165.64.22]) by mail6.XXXXX.or.jp (8.9.3/3.7W)
id KAA22458; Tue, 6 Jan 2004 10:00:21 +0900 (JST)
Date: Tue, 6 Jan 2004 10:00:21 +0900 (JST)
Message-Id: <200401060100.KAA22458@mail6.XXXXX.or.jp>
FROM: "Microsoft Corporation Security Section" <wezhuyncjgzsrfp_dfhz@newsletters.net>
TO: "Microsoft Customer" <zsrbz_lwhijzz@newsletters.net>
SUBJECT: Internet Security Pack
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="gumyqvzlfsgzlprmo"
X-UIDL: 763a035a92907e09fa32868862c20ac2
X-EdMax-Attachment-File: 20040106_105013_pn53gw\Attach$_01.html,
20040106_105013_pn53gw\Attach$_01.gif,
20040106_105013_pn53gw\Attach$_02.gif,
20040106_105013_pn53gw\installation21.exe,
X-EdMax-Status: 0
Microsoft Customer
this is the latest version of security update, the
"January 2004, Cumulative Patch" update which fixes
all known security vulnerabilities affecting
MS Internet Explorer, MS Outlook and MS Outlook Express
as well as three newly discovered vulnerabilities.
Install now to maintain the security of your computer
from these vulnerabilities, the most serious of which could
allow an attacker to run code on your system.
This update includes the functionality of all previously released patches.
System requirements: Windows 95/98/Me/2000/NT/XP
This update applies to:
- MS Internet Explorer, version 4.01 and later
- MS Outlook, version 8.00 and later
- MS Outlook Express, version 4.01 and later
Recommendation: Customers should install the patch at the earliest opportunity.
How to install: Run attached file. Choose Yes on displayed dialog box.
How to use: You don't need to do anything after installing this item.
Microsoft Product Support Services and Knowledge Base articles can be found on the Microsoft Technical Support web site.
http://support.microsoft.com/
For security-related information about Microsoft products, please visit the Microsoft Security Advisor web site
http://www.microsoft.com/security/
Thank you for using Microsoft products.
Please do not reply to this message.
It was sent from an unmonitored e-mail address and we are unable to respond to any replies.
----------------------------------------------
The names of the actual companies and products mentioned herein are the trademarks of their respective owners.
Copyright 2004 Microsoft Corporation.
- 6 名前： 初心者さん 投稿日：2004/01/28(水) 18:27 ID:6
- qqqq , xxxx は伏せ字。
多分最近はやってるやつ。添付はノー�点萓犬�削除してしまいました。
--
Received: from m-net.ne.jp by qqqq.xxxxx.xxx.xx (UUPC/extended 1.13k) with UUCP
for qqqq@qqqq.xxxxx.xxx.xx; Wed, 28 Jan 2004 18:09:37 +0900
Received: from m-net.ne.jp (YahooBB220005004182.bbtec.net [220.5.4.182]) by rayearth.xxxxx.xxx.xx (8.9.3p2/3.5Wpl2-uucp1/RIMNET) with ESMTP
id OAA05397 for <qqqq@qqqq.xxxxx.xxx.xx>; Wed, 28 Jan 2004 14:55:29 +0900 (JST)
From: qqqqq@m-net.ne.jp
Message-Id: <200401280555.OAA05397@rayearth.xxxxx.xxx.xx>
To: qqqq@qqqq.xxxxx.xxx.xx
Subject: Hello
Date: Wed, 28 Jan 2004 14:58:41 +0900
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0001_D74921D3.CAB4324B"
X-Priority: 3
X-MSMail-Priority: Normal
X-EdMax-Attachment-File: 20040128_181353_f4wk7m\doc.scr,
X-EdMax-Status: 0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
"氾楾~
ﾞ,$・
ﾞｪ$dJｽﾌ予ｹ�ｷ環JX坩Uﾞｷ,ｸz･
趨brVﾋ9Uﾘ・尊醯・羲\ｱ・lﾀbｭ�｢ｦ匳E・
ﾆ�
�6*�ﾟ・鑰�d憊ｨｸﾜｲ甎1"oWc蟆iF 耡5ｬv�ｰO�ｼｲ攝ﾀ}(!ﾘ.ﾔbEﾟ`H垳Hﾒw感ｹ?Λ｣��I*0隶B龠�ﾍ匱�ﾙ･髦.ﾔ雁・TﾌoｲﾂｩnrF槝x%ﾇ�`ｺｴ､t・
冗ｧ�%Hjｯ・糢篌F�}・挺ｳセｺﾌｦ �ｪﾀｿaｾn)&�6ｬA・ﾐ(ﾆ藻`ﾈ煕e・X匝ｵ・I逋ｫｭXｾﾂI･)蔟
拭�曷闌m#d・-\�-莨R貂|ｱﾍﾑ軼・淪~ｴﾜliｲYLﾉU(L鐡lt・ﾛｦ}稱｢・�
�ｿy|ｺ�G
Cﾊｦcu�｣W・ﾕ(0�赴(筺�43ｬ#ﾎｩe・・*・��
N~蚕fnzﾙﾘuvﾃ<
仇�3・・・ｹﾖﾄ&h｡ﾎ*熬�ｴﾞ鍵・ojｷｴ�~ｧut
巓Am.D鏈・zjｨ�ﾂ礦�悄�m%瓱SｳG肭e・8_｡贍・�
�(�z瞼6ｽ^4･�ﾐ�\0ﾞl-"顏d_(2ｦ・麑７縷ﾎｽS/*QﾀZﾓ∋菟樔ﾟ}�(7]S"�ﾊ・ｱ・ｲｾ燈s��GﾒyYh錐^H]粥��ﾘｭ?2儲eVhﾑ�ﾐb`ｫｯ楚・ｬ・/鹽1J�d$ｯﾆ姫i凩zM柄;UXﾉﾀｿﾑ痞遠ｳ
R
#0ﾓ遏ﾁ4%5cｰｼﾁｵ・B]ﾔｭFT^ﾓRﾙ
- 7 名前： あぼーん 投稿日：1970/01/01(木) 09:00 ID:あぼーん
- あぼーん
- 8 名前： 初心者さん 投稿日：2004/01/28(水) 18:31 ID:???
- ↑ もともと化けています。
- 9 名前： にしやま 投稿日：2004/03/02(火) 10:57 ID:???
- 私のアドレスで（を騙って？）送信されているらしいウイルスです。
xxxxx は伏せ字
ana.co.jp から USER UNKNOWN で戻ってきた中身です。
---
Reporting-MTA: dns; otopazf.121.ana.co.jp
Received-From-MTA: DNS; localhost
Arrival-Date: Tue, 2 Mar 2004 09:06:33 +0900 (JST)
Final-Recipient: RFC822; btoc@121.ana.co.jp
Action: failed
Status: 5.1.1
Remote-MTA: DNS; [10.1.145.45]
Diagnostic-Code: SMTP; 550 5.1.1 <btoc@121.ana.co.jp>... User unknown
Last-Attempt-Date: Tue, 2 Mar 2004 09:06:39 +0900 (JST)
---
Return-Path: <xxxxx@miolab.com>
Received: from otopazf.121.ana.co.jp (localhost [127.0.0.1])
by otopazf.121.ana.co.jp (Switch-3.1.4/Switch-3.1.0) with ESMTP id i2206XhW019227
for <btoc@121.ana.co.jp>; Tue, 2 Mar 2004 09:06:33 +0900 (JST)
Received: from 121.ana.co.jp (p12026-ipadfx01sasajima.aichi.ocn.ne.jp [219.162.134.27])
by otopazf.121.ana.co.jp (Switch-3.1.4/Switch-3.1.0) with ESMTP id i2206VTG019217
for <btoc@121.ana.co.jp>; Tue, 2 Mar 2004 09:06:32 +0900 (JST)
Message-Id: <200403020006.i2206VTG019217@otopazf.121.ana.co.jp>
From: xxxxx@miolab.com
To: btoc@121.ana.co.jp
Subject: Re: Your software
Date: Tue, 2 Mar 2004 09:07:10 +0900
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0004_00007B68.00003159"
X-Priority: 3
X-MSMail-Priority: Normal
This is a multi-part message in MIME format.
------=_NextPart_000_0004_00007B68.00003159
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
------------------ Virus Warning Message (on otopazf)
Found virus WORM_NETSKY.D in file application.pif
The uncleanable file is deleted.
---------------------------------------------------------
------=_NextPart_000_0004_00007B68.00003159
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Your file is attached.
------=_NextPart_000_0004_00007B68.00003159
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
------------------ Virus Warning Message (on otopazf)
application.pif is removed from here because it contains a virus.
---------------------------------------------------------
------=_NextPart_000_0004_00007B68.00003159--
- 10 名前： otopaze ってなに？ 投稿日：2004/04/19(月) 20:23 ID:6k9MRjbc
- おれもきた。
The original message was received at Mon, 12 Apr 2004 22:13:44 +0900 (JST)
from localhost [127.0.0.1]
----- The following addresses had permanent fatal errors -----
<ana17_106356448@121.ana.co.jp>
(reason: 550 5.1.1 <ana17_106356448@121.ana.co.jp>... User unknown)
----- Transcript of session follows -----
... while talking to [10.1.145.45]:
・・・・
Content-Type: message/delivery-status
Reporting-MTA: dns; otopaze.121.ana.co.jp
(pl050.nas314.tsushima.nttpc.ne.jp [210.153.165.242])
------------------ Virus Warning Message (on otopaze)
Found virus WORM_NETSKY.D in file document_4351.pif
The uncleanable file is deleted.
- 11 名前： 初心者さん 投稿日：2004/04/19(月) 23:36 ID:???
- それにしても NETSKY はやってますねぇ。
- 12 名前： うちも 投稿日：2004/04/21(水) 17:44 ID:???
- Norton AntiVirus が添付ファイルを削除しました: message_details.pif.
添付ファイルに W32.Netsky.D@mm ウイルスが感染していました。
新着レスの表示