- 1 名前： にしやま 投稿日：2004/01/07(水) 13:40 ID:???
- ウイルスメールを展示します。
- 2 名前： にしやま 投稿日：2004/01/07(水) 13:44 ID:???
- W32.Swen.A@mm その１
---------------------
Received: from XXXXX.or.jp (XXXXX [2XX.24X.19X.12X])
by mx1.XXXXX.or.jp (8.9.3p2/3.7W) with ESMTP id JAA19988;
Wed, 7 Jan 2004 09:12:08 +0900 (JST)
Received: from mail3.XXXXX.or.jp
by XXXXX.or.jp (3.7W/HMX-13) id JAA22631;
Wed, 7 Jan 2004 09:12:07 +0900 (JST)
Received: from ozatryq (pl144.nas511.k-tokyo.nttpc.ne.jp [210.165.64.144]) by mail3.XXXXX.or.jp (8.9.3/3.7W)
id JAA11104; Wed, 7 Jan 2004 09:11:04 +0900 (JST)
Date: Wed, 7 Jan 2004 09:11:04 +0900 (JST)
Message-Id: <200401070011.JAA11104@mail3.XXXXX.or.jp>
FROM: "Technical Bulletin" <lbbglegtja-jejtfxyb@updates.msn.net>
TO: "Consumer" <consumer_jmubbyiqf@updates.msn.net>
SUBJECT: New Patch
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="cicydkijgloaulms"
X-UIDL: fb231b784841cdeb5c4733a0a0261227
X-EdMax-Attachment-File: 20040107_101013_460anh\Attach$_01.html,
20040107_101013_460anh\Attach$_01.gif,
20040107_101013_460anh\Attach$_02.gif,
20040107_101013_460anh\installation54.exe,
X-EdMax-Status: 0
Microsoft Consumer
this is the latest version of security update, the
"January 2004, Cumulative Patch" update which fixes
all known security vulnerabilities affecting
MS Internet Explorer, MS Outlook and MS Outlook Express
(省略されました・・全てを読むにはここを押してください)
- 3 名前： にしやま 投稿日：2004/01/07(水) 15:49 ID:???
- W32.Swen.A@mm その２
---------------------
Received: from XXXXXX.or.jp (XXXXX [XXX.XXX.XX.XXX])
by mx1.XXXXXX.or.jp (8.9.3p2/3.7W) with ESMTP id JAA24729;
Wed, 7 Jan 2004 09:16:37 +0900 (JST)
Received: from mail6.XXXXXX.or.jp
by XXXXXX.or.jp (3.7W/HMX-13) id JAA23071;
Wed, 7 Jan 2004 09:16:37 +0900 (JST)
Received: from ncju (pl144.nas511.k-tokyo.nttpc.ne.jp [210.165.64.144]) by mail6.XXXXXX.or.jp (8.9.3/3.7W)
id JAA21908; Wed, 7 Jan 2004 09:15:33 +0900 (JST)
Date: Wed, 7 Jan 2004 09:15:33 +0900 (JST)
Message-Id: <200401070015.JAA21908@mail6.XXXXXX.or.jp>
FROM: "Public Support" <vofkxydbdhcfm_ttkhpmw@bulletin.com>
TO: "Customer" <eepsi-okmiyust@bulletin.com>
SUBJECT: Internet Upgrade
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="ossuaqzrukhwkw"
X-UIDL: ed1bb2259b0e7fd5949b419eae4337b9
X-EdMax-Attachment-File: 20040107_101019_rpp6tt\Attach$_01.html,
20040107_101019_rpp6tt\Attach$_01.gif,
20040107_101019_rpp6tt\Attach$_02.gif,
20040107_101019_rpp6tt\q268893.exe,
X-EdMax-Status: 0
Microsoft Customer
this is the latest version of security update, the
"January 2004, Cumulative Patch" update which fixes
all known security vulnerabilities affecting
MS Internet Explorer, MS Outlook and MS Outlook Express.
(省略されました・・全てを読むにはここを押してください)
- 4 名前： にしやま 投稿日：2004/01/07(水) 16:06 ID:???
- W32.Swen.A@mm その３
---------------------
Received: from XXXXX.or.jp (XXXXX [XXX.XXX.XXX.XXX])
by mx1.XXXXX.or.jp (8.9.3p2/3.7W) with ESMTP id NAA25337;
Tue, 6 Jan 2004 13:05:08 +0900 (JST)
Received: from mail5.XXXXX.or.jp
by XXXXX.or.jp (3.7W/HMX-13) id NAA21805;
Tue, 6 Jan 2004 13:05:07 +0900 (JST)
Received: from mlozx (pl061.nas511.k-tokyo.nttpc.ne.jp [210.165.64.61]) by mail5.XXXXX.or.jp (8.9.3/3.7W)
id NAA18966; Tue, 6 Jan 2004 13:03:40 +0900 (JST)
Date: Tue, 6 Jan 2004 13:03:40 +0900 (JST)
Message-Id: <200401060403.NAA18966@mail5.XXXXX.or.jp>
FROM: "Technical Support" <gzikffrpveqlku-ltfzcup@advisor.msn.com>
TO: "Customer" <customer-rgibwwe@advisor.msn.com>
SUBJECT: net security pack
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="numlzkxgvclgckl"
X-UIDL: 49bb7a8daed6a291b9635308038ecf45
X-EdMax-Attachment-File: 20040106_131007_d0wamm\Attach$_01.html,
20040106_131007_d0wamm\Attach$_01.gif,
20040106_131007_d0wamm\Attach$_02.gif,
20040106_131007_d0wamm\Q289924.exe,
X-EdMax-Status: 0
Microsoft Customer
this is the latest version of security update, the
"January 2004, Cumulative Patch" update which resolves
all known security vulnerabilities affecting
MS Internet Explorer, MS Outlook and MS Outlook Express
(省略されました・・全てを読むにはここを押してください)
- 5 名前： にしやま 投稿日：2004/01/07(水) 16:20 ID:???
- W32.Swen.@mm その４
その2,その3,その4 は SUBJECT と、添付ファイル名以外は同じようです。
---------------------
Received: from XXXXX.or.jp (XXXXX [XXX.XXX.XXX.XXX])
by mx1.XXXXX.or.jp (8.9.3p2/3.7W) with ESMTP id KAA06360;
Tue, 6 Jan 2004 10:02:38 +0900 (JST)
Received: from mail6.XXXXX.or.jp
by XXXXX.or.jp (3.7W/HMX-13) id KAA03861;
Tue, 6 Jan 2004 10:02:29 +0900 (JST)
Received: from uvchbqjn (pl022.nas511.k-tokyo.nttpc.ne.jp [210.165.64.22]) by mail6.XXXXX.or.jp (8.9.3/3.7W)
id KAA22458; Tue, 6 Jan 2004 10:00:21 +0900 (JST)
Date: Tue, 6 Jan 2004 10:00:21 +0900 (JST)
Message-Id: <200401060100.KAA22458@mail6.XXXXX.or.jp>
FROM: "Microsoft Corporation Security Section" <wezhuyncjgzsrfp_dfhz@newsletters.net>
TO: "Microsoft Customer" <zsrbz_lwhijzz@newsletters.net>
SUBJECT: Internet Security Pack
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="gumyqvzlfsgzlprmo"
X-UIDL: 763a035a92907e09fa32868862c20ac2
X-EdMax-Attachment-File: 20040106_105013_pn53gw\Attach$_01.html,
20040106_105013_pn53gw\Attach$_01.gif,
20040106_105013_pn53gw\Attach$_02.gif,
20040106_105013_pn53gw\installation21.exe,
X-EdMax-Status: 0
Microsoft Customer
this is the latest version of security update, the
"January 2004, Cumulative Patch" update which fixes
all known security vulnerabilities affecting
(省略されました・・全てを読むにはここを押してください)
- 6 名前： 初心者さん 投稿日：2004/01/28(水) 18:27 ID:6
- qqqq , xxxx は伏せ字。
多分最近はやってるやつ。添付はノー�点萓犬�削除してしまいました。
--
Received: from m-net.ne.jp by qqqq.xxxxx.xxx.xx (UUPC/extended 1.13k) with UUCP
for qqqq@qqqq.xxxxx.xxx.xx; Wed, 28 Jan 2004 18:09:37 +0900
Received: from m-net.ne.jp (YahooBB220005004182.bbtec.net [220.5.4.182]) by rayearth.xxxxx.xxx.xx (8.9.3p2/3.5Wpl2-uucp1/RIMNET) with ESMTP
id OAA05397 for <qqqq@qqqq.xxxxx.xxx.xx>; Wed, 28 Jan 2004 14:55:29 +0900 (JST)
From: qqqqq@m-net.ne.jp
Message-Id: <200401280555.OAA05397@rayearth.xxxxx.xxx.xx>
To: qqqq@qqqq.xxxxx.xxx.xx
Subject: Hello
Date: Wed, 28 Jan 2004 14:58:41 +0900
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0001_D74921D3.CAB4324B"
X-Priority: 3
X-MSMail-Priority: Normal
X-EdMax-Attachment-File: 20040128_181353_f4wk7m\doc.scr,
X-EdMax-Status: 0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
"氾楾~
ﾞ,$・
ﾞｪ$dJｽﾌ予ｹ�ｷ環JX坩Uﾞｷ,ｸz･
趨brVﾋ9Uﾘ・尊醯・羲\ｱ・lﾀbｭ�｢ｦ匳E・
ﾆ�
�6*�ﾟ・鑰�d憊ｨｸﾜｲ甎1"oWc蟆iF 耡5ｬv�ｰO�ｼｲ攝ﾀ}(!ﾘ.ﾔbEﾟ`H垳Hﾒw感ｹ?Λ｣��I*0隶B龠�ﾍ匱�ﾙ･髦.ﾔ雁・TﾌoｲﾂｩnrF槝x%ﾇ�`ｺｴ､t・
冗ｧ�%Hjｯ・糢篌F�}・挺ｳセｺﾌｦ �ｪﾀｿaｾn)&�6ｬA・ﾐ(ﾆ藻`ﾈ煕e・X匝ｵ・I逋ｫｭXｾﾂI･)蔟
拭�曷闌m#d・-\�-莨R貂|ｱﾍﾑ軼・淪~ｴﾜliｲYLﾉU(L鐡lt・ﾛｦ}稱｢・�
�ｿy|ｺ�G
Cﾊｦcu�｣W・ﾕ(0�赴(筺�43ｬ#ﾎｩe・・*・��
N~蚕fnzﾙﾘuvﾃ<
仇�3・・・ｹﾖﾄ&h｡ﾎ*熬�ｴﾞ鍵・ojｷｴ�~ｧut
巓Am.D鏈・zjｨ�ﾂ礦�悄�m%瓱SｳG肭e・8_｡贍・�
�(�z瞼6ｽ^4･�ﾐ�\0ﾞl-"顏d_(2ｦ・麑７縷ﾎｽS/*QﾀZﾓ∋菟樔ﾟ}�(7]S"�ﾊ・ｱ・ｲｾ燈s��GﾒyYh錐^H]粥��ﾘｭ?2儲eVhﾑ�ﾐb`ｫｯ楚・ｬ・/鹽1J�d$ｯﾆ姫i凩zM柄;UXﾉﾀｿﾑ痞遠ｳ
R
#0ﾓ遏ﾁ4%5cｰｼﾁｵ・B]ﾔｭFT^ﾓRﾙ
- 7 名前： あぼーん 投稿日：1970/01/01(木) 09:00 ID:あぼーん
- あぼーん
- 8 名前： 初心者さん 投稿日：2004/01/28(水) 18:31 ID:???
- ↑ もともと化けています。
- 9 名前： にしやま 投稿日：2004/03/02(火) 10:57 ID:???
- 私のアドレスで（を騙って？）送信されているらしいウイルスです。
xxxxx は伏せ字
ana.co.jp から USER UNKNOWN で戻ってきた中身です。
---
Reporting-MTA: dns; otopazf.121.ana.co.jp
Received-From-MTA: DNS; localhost
Arrival-Date: Tue, 2 Mar 2004 09:06:33 +0900 (JST)
Final-Recipient: RFC822; btoc@121.ana.co.jp
Action: failed
Status: 5.1.1
Remote-MTA: DNS; [10.1.145.45]
Diagnostic-Code: SMTP; 550 5.1.1 <btoc@121.ana.co.jp>... User unknown
Last-Attempt-Date: Tue, 2 Mar 2004 09:06:39 +0900 (JST)
---
Return-Path: <xxxxx@miolab.com>
Received: from otopazf.121.ana.co.jp (localhost [127.0.0.1])
by otopazf.121.ana.co.jp (Switch-3.1.4/Switch-3.1.0) with ESMTP id i2206XhW019227
for <btoc@121.ana.co.jp>; Tue, 2 Mar 2004 09:06:33 +0900 (JST)
Received: from 121.ana.co.jp (p12026-ipadfx01sasajima.aichi.ocn.ne.jp [219.162.134.27])
by otopazf.121.ana.co.jp (Switch-3.1.4/Switch-3.1.0) with ESMTP id i2206VTG019217
for <btoc@121.ana.co.jp>; Tue, 2 Mar 2004 09:06:32 +0900 (JST)
Message-Id: <200403020006.i2206VTG019217@otopazf.121.ana.co.jp>
From: xxxxx@miolab.com
To: btoc@121.ana.co.jp
Subject: Re: Your software
(省略されました・・全てを読むにはここを押してください)
- 10 名前： otopaze ってなに？ 投稿日：2004/04/19(月) 20:23 ID:6k9MRjbc
- おれもきた。
The original message was received at Mon, 12 Apr 2004 22:13:44 +0900 (JST)
from localhost [127.0.0.1]
----- The following addresses had permanent fatal errors -----
<ana17_106356448@121.ana.co.jp>
(reason: 550 5.1.1 <ana17_106356448@121.ana.co.jp>... User unknown)
----- Transcript of session follows -----
... while talking to [10.1.145.45]:
・・・・
Content-Type: message/delivery-status
Reporting-MTA: dns; otopaze.121.ana.co.jp
(pl050.nas314.tsushima.nttpc.ne.jp [210.153.165.242])
------------------ Virus Warning Message (on otopaze)
Found virus WORM_NETSKY.D in file document_4351.pif
The uncleanable file is deleted.
- 11 名前： 初心者さん 投稿日：2004/04/19(月) 23:36 ID:???
- それにしても NETSKY はやってますねぇ。
- 12 名前： うちも 投稿日：2004/04/21(水) 17:44 ID:???
- Norton AntiVirus が添付ファイルを削除しました: message_details.pif.
添付ファイルに W32.Netsky.D@mm ウイルスが感染していました。
-
|
