-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Why not do a strings and see which functions are imported? Even better,
why not just assume it's mal-ware or porn-ad-ware?

Joshua b. Jore
http://www.greentechnologist.org

On Fri, 2 Nov 2001, Munir Nassar wrote:

> I just got this email without To: field or a From: field
>
> here is the header from the mbox file:
>
> <CUT HERE>
> >From MAILER-DAEMON at RedConcepts.NET  Fri Nov  2 13:36:05 2001
> Return-Path: <MAILER-DAEMON at RedConcepts.NET>
> Received: from kuk (modem249-p72.dravanet.hu [212.40.75.249])
>         by RedConcepts.NET (8.11.2/8.11.2) with SMTP id fA2JZuv19185
>         for <nassarmu at redconcepts.net>; Fri, 2 Nov 2001 13:35:57 -0600
> Date: Fri, 2 Nov 2001 13:35:57 -0600
> Message-Id: <200111021935.fA2JZuv19185 at RedConcepts.NET>
> MIME-Version: 1.0
> Content-Type: multipart/mixed; boundary="--VEKXQJK1UZ4DY3GLMV096F85MB"
> Status: RO
> X-Status:
> X-Keywords:
> X-UID: 16
> <END CUT>
>
> it came with a .EXE file attachement "GPPFJJGP.EXE, i dont have a spare 95
> box around to see what the attachment does, any clues?
>
>  -munir
>
> --
>
> _______________________________________________
> Twin Cities Linux Users Group Mailing List - Minneapolis/St. Paul, Minnesota
> http://www.mn-linux.org
> tclug-list at mn-linux.org
> https://mailman.mn-linux.org/mailman/listinfo/tclug-list
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (OpenBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE8hQ/LfexLsowstzcRAtbcAJ0W5BJbk0nL9MrflR6BH4Htj5UYKwCg8o26
g8DRFFUeKu9RtvdeyyqlMCw=
=mLZo
-----END PGP SIGNATURE-----