Re: HTMLZip 'compressed' HTML mail - virus or spam ?!?!

["Ejay Hire" <Ejay.hire () broadslate net>]

It opens Cnn.com and in a hidden window it goes to a top-100 voting site and
votes for somebody... here is the page it opens...



----- Original Message -----
From: "Doru Petrescu" <pdoru () kappa ro>
To: <vuln-dev () securityfocus com>
Sent: Friday, September 14, 2001 5:11 AM
Subject: HTMLZip 'compressed' HTML mail - virus or spam ?!?!


> Hi everybody,
>
> This morning I received a message with subject 'AMERICA UNDER ATTACK' that
> contains a HTML part that contains some obfuscated JavaScript.
>
> This could be a virus or a SPAM (but I never seen such an obfuscated spam
> msg till now)
>
> if someone take the time to decript and analize please post result to the
> list.
>
>
> Best regards,
> Doru Petrescu

Attachment: neattrick.txt
Description: