From: Alan Sondheim <sondheim@panix.com>
To: _arc.hive_@lm.va.com.au
Subject: Virus Strings to Send to Rumania
Date: Sat, 30 Aug 2003 16:29:53 -0400 (EDT)




Virus Strings to Send to Rumania


<admin@duma.gov.ru>: host ns.gov.ru[194.226.80.77] said: 555 sorry, your
    envelope recipient is in my badrcptto list (#5.7.1) (in reply to RCPT TO
    command)

Diagnostic-Code: X-Postfix; host ns.gov.ru[194.226.80.77] said: 555 sorry, your
    envelope recipient is in my badrcptto list (#5.7.1) (in reply to RCPT TO
    command)

Date: Sat, 30 Aug 2003 16:24:13 -0400 (EDT)
From: Alan Sondheim <sondheim@panix.com>
To: admin@duma.gov.ru
Subject: HELO

This program must be run under Win32 UPX0 UPX1 UPX2 1.08 UPX! QSVW _^[Y]
h=.} ]cTAR &Q){7[ ]GS` iphlpapi.dll <GetN worF kParams @x199.166. ,T5?
hQ$" P5.>54P esPTs ~.<$! ABCDEFGHIJKLMNOPQRSTUXYZabc
defghijklmnopqrstuvwxyz012345678 9+/_U3 <2Ff [8;+ 7haN.N s3A<-t <Ar'<`v
kNAl S;!v$p r>4] b.*? Fd{g L+,0i 1z;s 8&,<[ loxQ rpGC; F/;3 Ur7g MK+d CS\D
OndRv wh\R~g |m@k W(QP .k!-d 1Rr`g -p2E _m@<D A4PQ4R,e; nM4S 4cFt lad7
"PJ)P PvSL TX####\`dh####lptx####| #### #### #### #### #### #### #### FFFF
 FFFF$(,4= MZPu
 prog
 mustMe ruv der Win3 CODE DAa_l .iD.K locP$ cDyh QL.@-O >PINGu 6rrd tQ@tN
RIVMSG #& :!@. s;^X #bxVN 4|tnF Zj%t ss: ^ \WY52Y V60| dos stop whois6
t+egold- ng.com USER w 5UNICK L911l +kGs :HT\hxA
 KWNEL32 WSOX ExitProce seHan*enc_jl rcpy lenC6te=H hJTickCoun\n Gnnec
cWsskec bi`Sacc)l? ASta up[v _\oa^hts! cvvk| (070N0S0`0 171J1x0 2J2Q2x2
3P3l3 5?5E5K5Q5W5]5c5i5o5u5{ (HELO -0 MAIL FROM: <admin@duma.gov.ru>
 RCPT TO QUIT From soft"(security@m 15=ToFS U+ t /Catch immedi7ly
 !&MIME-Version+1.0 -Type: qltip /jx9;b y="x l{pla ransfo ~FDeV f 1 ,/Aw
I8rw Exv nLor 1vir [?e> + 500 ;l(/f amC+ o}+/dN ElGta \wit{ \*.* .htmwab
dbxtb #2C:B :STR]
 /*F egB\h \["ES Es\C 8\R` g@w- vxP/ mpGlob alAl Dele eIoVrol f%hN{,[TXH
Drive ttribus Siz@ -k?Modu oCZ=d ]]RR1 PoiJ f3Xng&_l KeysA `KHN.2"
KERNEL32.DLL ADVAPI32.dll wininet.dll WSOCK32.dll LoadLibraryA
GetProcAddress ExitProcess RegCloseKey InternetGetConnectedState send



___