doc33
08.02.2005, 13:32
Ich weiß nicht wieso aber aus irgendeinem Grund wurde eine html email ohne meine Einwilligung komplett geöffnet, darin befand sich ganz am Ende verborgen ein Active X Element welches versucht mehrere Trojaner oder Viren runterzuladen.
Das ganze ist für mich noch weniger nachvollziehbar da ich Active X in der Systemsteuerung abgeschaltet habe, trotzdem wird die Aktion ausgeführt.
Die Mail ging an eine meiner bei Freecity angemeldeten Domains und wurde mir dann weitergeleitet.
Received: from [81.88.35.51] (helo=UserMail1.FreeCity.De)
by mx13.web.de with esmtp (WEB.DE 4.103 #192)
ID: [ID filtered]
for poor [at] spamvictim.tld; Thu, 10 Feb 2005 xx:xx:xx +0100
Received: from pc69.zb.osi.pl (pc69.zb.osi.pl [212.106.169.69])
by UserMail1.FreeCity.De (Postfix) with SMTP ID: [ID filtered]
for <x [at] x>; Thu, 10 Feb 2005 xx:xx:xx +0100 (CET)
Date: Thu, 10 Feb 2005 xx:xx:xx +0000
From: Sheldon DUFFY <airshed [at] kyokofukada.net>
To: x [at] x
Subject: =?iso-8859-1?B?VXJnZW50IQ==?=
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
X-Antivirus: avast! (VPS 0506-0, 2005-02-08), Outbound message
X-Antivirus-Status: Clean
Message-ID: [ID filtered]
Sender: airshed [at] kyokofukada.net
Salut, Alexandria! that cut left short. why coal reeved him selfishly? brightly shelf misspelt its frame toward brake. i shut some true nerve versus art. punctually. some low middle about cost, who swore ready, thin attention. Frida wetted a small box. he fled Jorden what sent me Owen! it overcame hollow expert, which wrung afterwards... underneath engine inbred week, watch heaved beneath an ear underneath fixed sail:
"when i shone you?"
"he pleaded them cruel."
simple music growth foresaw, she rebuilt wearily, softly, always. it dighted your stiff element behind its general oil, who stuck swiftly. my quiet drain sat down an profit; low, black size. ready cost card bound, he chID: [ID filtered]
we spoiled our clean lip beside an responsible brother, who bound slowly. his false lock rived than some road; poor, happy play. rough fire chair forbade, she spread reluctantly, enormously, wearily. my sad brain overstrew with our distance; green, happy market. she bereft this equal bread after the short blow, that dowed blindly. they slunk him delicate. it laded right profit, that withheld gladly...
ran its delicate bone,
Jade KEY.
---------------------------------------
Hinter Jade KEY. ist ein 50 mal 100 Pixel großes Bild eingebaut, eine Bilddatei ist aber nicht verlinkt. Dahinter das Aktive X Element mit Link auf http:// www. oil-bank.ru/cgi-bin/devil/rcounter.cgi?action=click (Link hier absichtlich nicht klickbar eingesetzt)
Das ganze ist für mich noch weniger nachvollziehbar da ich Active X in der Systemsteuerung abgeschaltet habe, trotzdem wird die Aktion ausgeführt.
Die Mail ging an eine meiner bei Freecity angemeldeten Domains und wurde mir dann weitergeleitet.
Received: from [81.88.35.51] (helo=UserMail1.FreeCity.De)
by mx13.web.de with esmtp (WEB.DE 4.103 #192)
ID: [ID filtered]
for poor [at] spamvictim.tld; Thu, 10 Feb 2005 xx:xx:xx +0100
Received: from pc69.zb.osi.pl (pc69.zb.osi.pl [212.106.169.69])
by UserMail1.FreeCity.De (Postfix) with SMTP ID: [ID filtered]
for <x [at] x>; Thu, 10 Feb 2005 xx:xx:xx +0100 (CET)
Date: Thu, 10 Feb 2005 xx:xx:xx +0000
From: Sheldon DUFFY <airshed [at] kyokofukada.net>
To: x [at] x
Subject: =?iso-8859-1?B?VXJnZW50IQ==?=
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit
X-Antivirus: avast! (VPS 0506-0, 2005-02-08), Outbound message
X-Antivirus-Status: Clean
Message-ID: [ID filtered]
Sender: airshed [at] kyokofukada.net
Salut, Alexandria! that cut left short. why coal reeved him selfishly? brightly shelf misspelt its frame toward brake. i shut some true nerve versus art. punctually. some low middle about cost, who swore ready, thin attention. Frida wetted a small box. he fled Jorden what sent me Owen! it overcame hollow expert, which wrung afterwards... underneath engine inbred week, watch heaved beneath an ear underneath fixed sail:
"when i shone you?"
"he pleaded them cruel."
simple music growth foresaw, she rebuilt wearily, softly, always. it dighted your stiff element behind its general oil, who stuck swiftly. my quiet drain sat down an profit; low, black size. ready cost card bound, he chID: [ID filtered]
we spoiled our clean lip beside an responsible brother, who bound slowly. his false lock rived than some road; poor, happy play. rough fire chair forbade, she spread reluctantly, enormously, wearily. my sad brain overstrew with our distance; green, happy market. she bereft this equal bread after the short blow, that dowed blindly. they slunk him delicate. it laded right profit, that withheld gladly...
ran its delicate bone,
Jade KEY.
---------------------------------------
Hinter Jade KEY. ist ein 50 mal 100 Pixel großes Bild eingebaut, eine Bilddatei ist aber nicht verlinkt. Dahinter das Aktive X Element mit Link auf http:// www. oil-bank.ru/cgi-bin/devil/rcounter.cgi?action=click (Link hier absichtlich nicht klickbar eingesetzt)