Autor: darecki_at_wytnij.sobie.to
Data: Fri 01 Dec 2000 - 18:56:00 MET
Tak, tym razem to po prostu przestepca, przynajmniej moim zdaniem.
Ktos (kto zaraz podam) wysyla masowo romeo&julie z adresu SDI.
Najwyrazniej robi to celowo. Wpisal sobie "From: ads_at_atcom.pl", czyli
adres automatu od ogloszen.
Do czasu az abuse_at_tpnet cos zrobi proponuje umiescic jego IP w waszych
bazach spamerow, zeby wam tego g**na nie naslal.
Pozdrawiam
D.M.
ps. skrypt tutaj uszkodzony, binaria wyjete
++++++++++++++++++++++++++++++++++++++++++++++++++++
Received: from uxloawtq (pa2.rodlo.sdi.tpnet.pl [213.76.224.2]) by gamma.dnd.com.pl with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21)
id XTF3CTTZ; Thu, 30 Nov 2000 22:32:58 +0100
Subject: where is my juliet ?
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_001D_01C04A9A.F06454A0"
X-Priority: 3
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.123
This is a multi-part message in MIME format.
------=_NextPart_000_001D_01C04A9A.F06454A0
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_001E_01C04A9A.F06454A0"
------=_NextPart_001_001E_01C04A9A.F06454A0
Content-Type: text/plain;
Content-Transfer-Encoding: quoted-printable
------=_NextPart_001_001E_01C04A9A.F06454A0
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><BODY>
<IFRAME width=3D1 height=3D1 src=3D"cid:000701bf8458$eb570380$dc0732d4_at_123"></IFRAME>
<IFRAME width=3D1 height=3D1 src=3D"cid:000701bf8458$eb570381$dc0732d4_at_123"></IFRAME>
<P></P>
<SCRIPT>
window.show_______Help("c:/windows/temp/xjuliet.chm");
</SCRIPT>
</BODY></HTML>
------=_NextPart_001_001E_01C04A9A.F06454A0--
------=_NextPart_000_001D_01C04A9A.F06454A0
Content-Type: application/x-msdownload;
name="xromeo.exe"
Content-Transfer-Encoding: base64
Content-ID: <000701bf8458$eb570380$dc0732d4_at_123>
-- ATCOM Internet Service Provider tel.(22)8703799 fax (22)6497595 Ksiazka adresowa http://www.atcom.net.pl/mailbook/ Bezplatne ogloszenia http://www.atcom.net.pl/ogloszenia/ USENET news://news.atcom.net.pl
To archiwum zostało wygenerowane przez hypermail 2.1.7 : Wed 19 May 2004 - 16:39:33 MET DST