Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- // Evidence of the fake FBI alert mail.
- // #MalwareMustDie - Analyzed by: @unixfreaxjp
- // [0x00000000:0x00400000]> !date
- // Sun Apr 7 16:05:51 JST 2013
- // Evidence first
- Delivered-To: xxx@xxx
- Received: by 10.229.13.217 with SMTP id d25csp240276qca;
- Fri, 5 Apr 2013 13:29:49 -0700 (PDT)
- X-Received: by 10.66.102.98 with SMTP id fn2mr16858333pab.192.1365193789161;
- Fri, 05 Apr 2013 13:29:49 -0700 (PDT)
- Return-Path: <wlijdjrry@hotmail.com>
- Received: from nm22-vm7.bullet.mail.ird.yahoo.com (nm22-vm7.bullet.mail.ird.yahoo.com. [212.82.109.226])
- by mx.google.com with SMTP id as5si15551165pbd.266.2013.04.05.13.29.46;
- Fri, 05 Apr 2013 13:29:49 -0700 (PDT)
- Received-SPF: softfail (google.com: domain of transitioning wlijdjrry@hotmail.com does not designate 212.82.109.226 as permitted sender) client-ip=212.82.109.226;
- Authentication-Results: mx.google.com;
- spf=softfail (google.com: domain of transitioning wlijdjrry@hotmail.com does not designate 212.82.109.226 as permitted sender) smtp.mail=wlijdjrry@hotmail.com
- Received: from [77.238.189.50] by nm22.bullet.mail.ird.yahoo.com with NNFMP; 05 Apr 2013 20:29:44 -0000
- Received: from [46.228.39.37] by tm3.bullet.mail.ird.yahoo.com with NNFMP; 05 Apr 2013 20:29:44 -0000
- Received: from [127.0.0.1] by smtp170.mail.ir2.yahoo.com with NNFMP; 05 Apr 2013 20:29:44 -0000
- X-Yahoo-Newman-Id: 973306.90212.bm@smtp170.mail.ir2.yahoo.com
- Message-ID: <973306.90212.bm@smtp170.mail.ir2.yahoo.com>
- X-Yahoo-Newman-Property: ymail-3
- X-YMail-OSG: 86jPt4UVM1nTwB9Es8LPsbaBOP0w9tT5mURiTgG2.1RbIgk
- JvzYRJslK0hOGmx7_pOF_1x_AkJSI4qs49IeO75xAHTuVw6D_1A3I45QPx7u
- x4TU9TP5d0t73EZO.XjQsMFQZJ8gAL7.2FOGAl60VVSbbvikntZVsN4oSpF5
- uTffB79DQ2CWaj.oigkG9f.Mc26XvchmbcBJWdOKs05LNd5jGSuWKnrZZCcd
- w4Jn9ywv.a4Pq3vKyW4YE2VwPFJ_ra8cKS_Wo1HAsA._VjVxd_ccIiJBl2Cu
- NzQ3IqaL.cEKLWmw73I0aSuprEtkjvC_pYIM0dCPi2q_jZCjwS_EU0sqibNl
- yTRGV95QNBGYUkb_2_gm7fWIYea5WXbnP0Uyrco1UJE91DmcnAwpXpBMgR.w
- HFI6Sd6wnCEeLncl7h_TzPZUMSWqgRxAohZEN8do.V6l4umVCfn90tSCqB_j
- d5hBwcOxYYpqD5O8hPI3a1NPVHJtoWJXl0OX830e.ZEphvjRdEC6j3r0xRhW
- S85oG
- X-Yahoo-SMTP: LlMTR5qswBCKF_5JWXrxj2GTVoKjYNOP5LgYsjQqtQ--
- X-Rocket-Received: from User (wlijdjrry@217.172.136.214 with login)
- by smtp170.mail.ir2.yahoo.com with SMTP; 05 Apr 2013 20:29:44 +0000 UTC
- Reply-To: <robertmullerrobertmueller@rocketmail.com>
- From: "Mr Robert M"<wlijdjrry@hotmail.com>
- Subject: READ URGENTLY
- Date: Fri, 5 Apr 2013 21:29:28 +0100
- MIME-Version: 1.0
- Content-Type: multipart/mixed;
- boundary="----=_NextPart_000_0113_01C2A9A6.72FEA680"
- X-Priority: 3
- X-MSMail-Priority: Normal
- X-Mailer: Microsoft Outlook Express 6.00.2600.0000
- X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
- This is a multi-part message in MIME format.
- ------=_NextPart_000_0113_01C2A9A6.72FEA680
- Content-Type: text/html;
- charset="Windows-1251"
- Content-Transfer-Encoding: 7bit
- <HTML><HEAD><TITLE></TITLE>
- </HEAD>
- <BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
- <FONT size=2 color=#000000 face="Arial">
- <DIV>
- </DIV>
- <DIV>
- FEDERAL BUREAU OF INVESTIGATIONS</DIV>
- <DIV>
- 935 Pennsylvania Avenue Northwest</DIV>
- <DIV>
- Washington D.C., DC 20535, United States</DIV>
- <DIV>
- Tel/Fax(202) 324-4008</DIV>
- <DIV>
- </DIV>
- <DIV>
- READ THE ATTACHED EMAIL AND COMPLY URGENTLY IT IS VIRUS FREE.</DIV>
- <DIV>
- </DIV>
- <DIV>
- MR ROBERT MUELLER</DIV>
- <DIV>
- DIRECTOR</DIV>
- <DIV>
- UNITED STATES DEPARTMENT OF JUSTICE</DIV>
- <DIV>
- FEDERAL BUREAU OF INVESTIGATIONS</DIV>
- <DIV>
- </DIV>
- </FONT>
- </BODY></HTML>
- ------=_NextPart_000_0113_01C2A9A6.72FEA680
- Content-Type: application/octet-stream;
- name="URGENT INFORMATION FOR YOU.txt"
- Content-Transfer-Encoding: base64
- Content-Disposition: attachment;
- filename="URGENT INFORMATION FOR YOU.txt"
- ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
- ICAgICAgICAgICAgICAgICAgICAgICAgDQogICAgICAgICAgICAgICAgICAg
- ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
- ICAgICANCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
- ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIA0KICAgICAgICAgICAg
- ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgDQpGRURFUkFMIEJV
- UkVBVSBPRiBJTlZFU1RJR0FUSU9OUw0KOTM1IFBlbm5zeWx2YW5pYSBBdmVu
- dWUgTm9ydGh3ZXN0DQpXYXNoaW5ndG9uIEQuQy4sIERDIDIwNTM1LCBVbml0
- ZWQgU3RhdGVzDQpUZWwvRmF4KDIwMikgMzI0LTQwMDgNCiANCiANCkF0dGVu
- dGlvbiBCZW5lZmljaWFyeSwNCiANCiAgICAgICAgICAgICAgICAgICAgICAg
- ICAgICAgICAgICAgICAgICAgICBVUkdFTlQgSU5GT1JNQVRJT04gRk9SIFlP
- VSAsRk9SIDIwMTMNCiANClJlY29yZHMgc2hvdyB0aGF0IHlvdSBhcmUgYW1v
- bmcgb25lIG9mIHRoZSBpbmRpdmlkdWFscyBhbmQgb3JnYW5pemF0aW9ucyB3
- aG8gYXJlIHlldCB0byByZWNlaXZlIHRoZWlyIG92ZXJkdWUgcGF5bWVudCBm
- cm9tIG92ZXJzZWFzIHdoaWNoIGluY2x1ZGVzIHRob3NlIG9mIExvdHRlcnkv
- R2FtYmxpbmcsIENvbnRyYWN0IGFuZCBJbmhlcml0YW5jZS4gVGhyb3VnaCBv
- dXIgRnJhdWQgTW9uaXRvcnkgVW5pdCB3ZSBoYXZlIGFsc28gbm90aWNlZCB0
- aGF0IG92ZXIgdGhlIHBhc3QgeW91IGhhdmUgYmVlbiB0cmFuc2FjdGluZyB3
- aXRoIHNvbWUgaW1wb3N0ZXJzIGFuZCBmcmF1ZHN0ZXJzIHdobyBoYXZlIGJl
- ZW4gaW1wZXJzb25hdGluZyB0aGUgbGlrZXMgb2YgUHJvZi4gU29sdWRvIG9m
- IHRoZSBDZW50cmFsIEJhbmsgT2YgTmlnZXJpYSwgTXIuIFBhdHJpY2sgQXpp
- emEsIEFuZGVyc29uLCBXYWxsYWNlIEZyZWQsIG5vbmUgb2ZmaWNpYWxzIG9m
- IE9jZWFuaWMgQmFuaywgWmVuaXRoIEJhbmtzLCBLZWx2aW4gWW91bmcgb2Yg
- SFNCQyxCYW5rIG9mIEFtZXJpY2EgVG9wIG9mZmljaWFscyxDaXRpIEJhbmss
- TWFqb3IgQmFua3MgaW4gU3BhaW4sTG9uZG9uLCBTbWl0aCBXaWxsaWFtcywg
- RGFuaWVsIFdpbHNvbiwgSWJyYWhpbSBTdWxlLCBEci4gUGhpbGlwIE1vcmdh
- biwgRHIuIFVzbWFuIFNoYW1zdWRkZWVuIGFuZCBzb21lIGltcG9zdGVycyBj
- bGFpbWluZyB0byBiZSBUaGUgRmVkZXJhbCBCdXJlYXUgb2YgSW52ZXN0aWdh
- dGlvbi4NCiANClRoZSBDeWJlciBDcmltZSBEaXZpc2lvbiBvZiB0aGUgRkJJ
- IGdhdGhlcmVkIGluZm9ybWF0aW9uIGZyb20gdGhlIEludGVybmV0IENyaW1l
- IENvbXBsYWludCBDZW50ZXIgKElDQ0MpIGZvcm1lcmx5IGtub3duIGFzIHRo
- ZSBJbnRlcm5ldCBGcmF1ZCBDb21wbGFpbnQgQ2VudGVyIChJRkNDKSBvZiBo
- b3cgc29tZSBwZW9wbGUgaGF2ZSBsb3N0IG91dHJhZ2VvdXMgc3VtcyBvZiBt
- b25leSB0byB0aGVzZSBpbXBvc3RlcnMuIEFzIGEgcmVzdWx0IG9mIHRoaXMg
- d2UgaGVyZWJ5IGFkdmlzZSB5b3UgdG8gc3RvcCBjb21tdW5pY2F0aW9uIHdp
- dGggYW55IG9uZSBub3QgcmVmZXJyZWQgdG8geW91IGJ5IHVzLg0KV2UgaGF2
- ZSBuZWdvdGlhdGVkIHdpdGggdGhlIEZlZGVyYWwgTWluaXN0cnkgb2YgRmlu
- YW5jZSB0aGF0IHlvdXIgcGF5bWVudCB0b3RhbGluZyAkNi4xbWlsbGlvbiB1
- bml0ZWQgc3RhdGVkIGRvbGxhcnMgd2lsbCBiZSByZWxlYXNlZCB0byB5b3Ug
- dmlhIGEgY3VzdG9tIHBpbiBiYXNlZCBBVE0gY2FyZCB3aXRoIGEgbWF4aW11
- bSB3aXRoZHJhd2FsIGxpbWl0IG9mIFRocmVlIHRob3VzYW5kIHVzIGRvbGxh
- cnMgJDMsMDAwIGEgZGF5IHdoaWNoIGlzIHBvd2VyZWQgYnkgVmlzYSBDYXJk
- IGFuZCBjYW4gYmUgdXNlZCBhbnl3aGVyZSBpbiB0aGUgd29ybGQgd2VyZSB5
- b3Ugc2VlIGEgVmlzYSBDYXJkIExvZ28gb24gdGhlIEF1dG9tYXRpYyBUZWxs
- ZXIgTWFjaGluZSAoQVRNKS4gV2UgaGF2ZSBhZHZpc2VkIHRoYXQgdGhpcyBz
- aG91bGQgYmUgdGhlIG9ubHkgd2F5IGEgd2hpY2ggeW91IGFyZSB0byByZWNl
- aXZlIHlvdXIgcGF5bWVudCBiZWNhdXNlIGl0P3MgbW9yZSBndWFyYW50ZWVk
- LCBzaW5jZSBvdmVyIEZpZnRlZW4gYmlsbGlvbiB1cyBkb2xsYXJzIHdhcyBs
- b3N0IG9uIGZha2UgY2hlcXVlIGxhc3QgeWVhciAyMDEyLg0KIA0KV2UgZ3Vh
- cmFudGVlIDEwMCUgcmVjZWlwdCBvZiB5b3VyIHBheW1lbnQsIGJlY2F1c2Ug
- d2UgaGF2ZSBwZXJmZWN0ZWQgZXZlcnl0aGluZyBpbiByZWdhcmRzIHRvIHRo
- ZSByZWxlYXNlIG9mIHlvdXIgJDYuMSBtaWxsaW9uIHVuaXRlZCBzdGF0ZWQg
- ZG9sbGFycyB0byBiZSAxMDAlIHJpc2sgZnJlZSBhbmQgZnJlZSBmcm9tIGFu
- eSBoaXRjaGVzIGFzIGl0cyBvdXIgZHV0eSB0byBwcm90ZWN0IGNpdGl6ZW5z
- IG9mIHRoZSBVbml0ZWQgU3RhdGVzIG9mIEFtZXJpY2EuIChUaGlzIGlzIGFz
- IGEgcmVzdWx0IG9mIHRoZSBtYW5kYXRlIGZyb20gVVMgR292ZXJubWVudCB0
- byBtYWtlIHN1cmUgYWxsIGRlYnRzIG93ZWQgdG8gY2l0aXplbnMgb2YgQW1l
- cmljYW4gd2hpY2ggaW5jbHVkZXMgSW5oZXJpdGFuY2UsIENvbnRyYWN0LCBH
- YW1ibGluZy9Mb3R0ZXJ5IGV0YyBhcmUgYmVlbiBjbGVhcmVkIGZvciB0aGUg
- YmV0dGVybWVudCBvZiB0aGUgY3VycmVudCBlY29ub21pYyBzdGF0dXMgb2Yg
- dGhlIG5hdGlvbiBhbmQgaXRzIGNpdGl6ZW5zIGFzIGhlIGhhcyBhbHdheXMg
- YmVsaWV2ZWQgT3VyIFRpbWUgZm9yIENoYW5nZSBoYXMgY29tZSBiZWNhdXNl
- IENoYW5nZSBjYW4gaGFwcGVuKS4NCiANCkJlbG93IGFyZSBmZXcgbGlzdCBv
- ZiB0cmFja2luZyBudW1iZXJzIHlvdSBjYW4gdHJhY2sgZnJvbSBVc3BzIHdl
- YnNpdGUgdG8gY29uZmlybSBwZW9wbGUgbGlrZSB5b3Ugd2hvIGhhdmUgcmVj
- ZWl2ZWQgdGhlaXIgcGF5bWVudCBzdWNjZXNzZnVsbHkuDQogDQpOYW1lIDog
- Q0hBUkxPVFRFIE5FV0VMTDogVXNwcyBUcmFja2luZyBOdW1iZXI6IEVPOTg0
- NTQyNjg4VVMNCiANCiANClRvIHJlZGVlbSB5b3VyIGZ1bmQgeW91IGFyZSBo
- ZXJlYnkgYWR2aXNlZCB0byBjb250YWN0IHRoZSBBVE0gQ2FyZCBDZW50ZXIg
- dmlhIGVtYWlsIGZvciB0aGVpciByZXF1aXJlbWVudCB0byBwcm9jZWVkIGFu
- ZCBwcm9jdXJlIHlvdXIgQXBwcm92YWwgb2YgUGF5bWVudCBXYXJyYW50IGFu
- ZCBFbmRvcnNlbWVudCBvZiB5b3VyIEFUTSBSZWxlYXNlIE9yZGVyIG9uIHlv
- dXIgYmVoYWxmIHdoaWNoIHdpbGwgY29zdCB5b3UgJDEwNSBvbmx5IG5vdGhp
- bmcgbW9yZSBhbmQgbm8gaGlkZGVuIGZlZXMgYXMgZXZlcnl0aGluZyBlbHNl
- IGhhcyBiZWVuIHRha2VuIGNhcmVkIG9mIGJ5IHRoZSBGZWRlcmFsIEdvdmVy
- bm1lbnQgaW5jbHVkaW5nIHRheGVzLCBjdXN0b20gcGFwZXIgYW5kIGNsZWFy
- YW5jZSBkdXR5IHNvIGFsbCB5b3Ugd2lsbCBldmVyIG5lZWQgdG8gcGF5IGlz
- ICQxMDUgb25seS4NCkNvbnRhY3QgSW5mb3JtYXRpb24NCg0KTmFtZTogTXIg
- Tm91bGFuZCBTYW1zb24NCkVtYWlsOiBkcm5vdWxhbmRzYW1zb25Acm9ja2V0
- bWFpbC5jb20NClRlbDogKzEtMzAzLTczMS0yODIzDQpEbyBjb250YWN0IE5v
- dWxhbmQgU2Ftc29uIG9mIHRoZSBBVE0gQ2FyZCBDZW50ZXIgdmlhIGhpcyBj
- b250YWN0IGRldGFpbHMgYWJvdmUgYW5kIGZ1cm5pc2ggaGltIHdpdGggeW91
- ciBkZXRhaWxzIGFzIGxpc3RlZCBiZWxvdzoNCllvdXIgZnVsbCBOYW1lOg0K
- WW91ciBBZGRyZXNzOg0KSG9tZS9DZWxsIFBob25lOg0KT2NjdXBhdGlvbjoN
- CkFnZToNCiANCk9uIGNvbnRhY3RpbmcgaGltIHdpdGggeW91ciBkZXRhaWxz
- IHlvdXIgZmlsZXMgd291bGQgYmUgdXBkYXRlZCBhbmQgaGUgd2lsbCBiZSBz
- ZW5kaW5nIHlvdSB0aGUgcGF5bWVudCBpbmZvcm1hdGlvbiBpbiB3aGljaCB5
- b3Ugd2lsbCB1c2UgaW4gbWFraW5nIHBheW1lbnQgb2YgJDEwNSB0byBoaW0g
- Zm9yIHRoZSBwcm9jdXJlbWVudCBvZiB5b3VyIEFwcHJvdmFsIG9mIFBheW1l
- bnQgV2FycmFudCBhbmQgRW5kb3JzZW1lbnQgb2YgeW91ciBBVE0gUmVsZWFz
- ZSBPcmRlci4gQWZ0ZXIgd2hpY2ggdGhlIGRlbGl2ZXJ5IG9mIHlvdXIgQVRN
- IGNhcmQgd2lsbCBiZSBlZmZlY3RlZCB0byB5b3VyIGRlc2lnbmF0ZWQgaG9t
- ZSBhZGRyZXNzIHdpdGhvdXQgYW55IGZ1cnRoZXIgZGVsYXksIGV4dHJhIGZl
- ZSBvciBhbnkgYXV0aG9yaXR5IHJhaXNpbmcgZXllYnJvdy4NCiANCiANClVw
- b24gcmVjZWlwdCBvZiBwYXltZW50IHRoZSBkZWxpdmVyeSBvZmZpY2VyIHdp
- bGwgZW5zdXJlIHRoYXQgeW91ciBwYWNrYWdlIGlzIHNlbnQgd2l0aGluIDI0
- IHdvcmtpbmcgaG91cnMuIEJlY2F1c2Ugd2UgYXJlIHNvIHN1cmUgb2YgZXZl
- cnl0aGluZyB3ZSBhcmUgZ2l2aW5nIHlvdSBhIDEwMCUgbW9uZXkgYmFjayBn
- dWFyYW50ZWUgaWYgeW91IGRvIG5vdCByZWNlaXZlIHlvdXIgQVRNIENBUkQg
- U2hpcHBtZW50IENvbmZpcm1hdGlvbiB3aXRoaW4gdGhlIG5leHQgMjRocnMg
- YWZ0ZXIgeW91IGhhdmUgbWFkZSB0aGUgcGF5bWVudCBmb3Igc2hpcHBpbmcu
- DQogDQpPbmNlIGFnYWluIHdlIGFyZSBzbyBzdXJlIG9mIHlvdSByZWNlaXZp
- bmcgeW91ciBwYXltZW50IGF0IG5vIGFueSBvdGhlciBjb3N0IGFzIHdlIGhh
- dmUgdGFraW5nIGl0IHVwb24gb3VyIGR1dHkgdG8gbW9uaXRvciBldmVyeXRo
- aW5nIGluIG90aGVyIHRvIGN1YiBjeWJlciBjcmltZSB0aGF0IGlzIHBlcnBl
- dHJhdGVkIGJ5IHRob3NlIGltcG9zdG9ycy5Zb3UgYXJlIHJlcXVlc3RlZCB0
- byBjdXQgZnVydGhlciBjb21tdW5pY2F0aW9ucyB3aXRoIHRoZXNlIGltcG9z
- dG9ycy9mcmF1ZHN0ZXJzIGFzIGNoYXJnZXMgb2YgY29uc2lwcmFjeSB3aWxs
- IGJlIGxldmVsbGVkIGFnYWluc3QgYXMgYW4gYWNjb21wYW5pZXMgaWYgeW91
- IGNvbnRpbnVlLiBmb3J3YXJkIGV2ZXJ5IGNvcnJlc3BvbmRpbmcgZW1haWwg
- cmVjZWl2ZWQgZnJvbSB0aGVtIHRvIHNwYW1tZXNzYWdlc21vbml0b3JpbmdA
- Z21haWwuY29tDQogDQpUaGFua3MgYW5kIGhvcGUgdG8gcmVhZCBmcm9tIHlv
- dSBzb29uLg0KIA0KTVIgUk9CRVJUIE1VRUxMRVINCkRJUkVDVE9SDQpVTklU
- RUQgU1RBVEVTIERFUEFSVE1FTlQgT0YgSlVTVElDRQ0KRkVERVJBTCBCVVJF
- QVUgT0YgSU5WRVNUSUdBVElPTlM=
- ------=_NextPart_000_0113_01C2A9A6.72FEA680--
- ///// Sample/evidence number two
- Delivered-To: xxx@xxxx
- Received: by 10.229.13.217 with SMTP id d25csp237000qca;
- Fri, 5 Apr 2013 11:34:42 -0700 (PDT)
- X-Received: by 10.66.254.136 with SMTP id ai8mr16585327pad.26.1365186882088;
- Fri, 05 Apr 2013 11:34:42 -0700 (PDT)
- Return-Path: <wlijdjrry@hotmail.com>
- Received: from extmail-01.people.net.au (extmail-01.people.net.au. [202.154.123.98])
- by mx.google.com with SMTP id vr5si15743072pab.266.2013.04.05.11.34.40;
- Fri, 05 Apr 2013 11:34:42 -0700 (PDT)
- Received-SPF: softfail (google.com: domain of transitioning wlijdjrry@hotmail.com does not designate 202.154.123.98 as permitted sender) client-ip=202.154.123.98;
- Authentication-Results: mx.google.com;
- spf=softfail (google.com: domain of transitioning wlijdjrry@hotmail.com does not designate 202.154.123.98 as permitted sender) smtp.mail=wlijdjrry@hotmail.com
- Message-Id: <515f1942.e59a420a.5ad5.ffffd817SMTPIN_ADDED_MISSING@mx.google.com>
- Received: (qmail 11922 invoked from network); 5 Apr 2013 18:34:39 -0000
- Received: from unknown (HELO User) (218.215.52.46)
- by extmail-01.people.net.au with SMTP; 5 Apr 2013 18:34:39 -0000
- Reply-To: <robertmullerrobertmueller@rocketmail.com>
- From: "Mr Robert M"<wlijdjrry@hotmail.com>
- Subject: URGENT MAIL FOR YOU
- Date: Fri, 5 Apr 2013 19:34:23 +0100
- MIME-Version: 1.0
- Content-Type: multipart/mixed;
- boundary="----=_NextPart_000_009E_01C2A9A6.1287B866"
- X-Priority: 3
- X-MSMail-Priority: Normal
- X-Mailer: Microsoft Outlook Express 6.00.2600.0000
- X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
- This is a multi-part message in MIME format.
- ------=_NextPart_000_009E_01C2A9A6.1287B866
- Content-Type: text/html;
- charset="Windows-1251"
- Content-Transfer-Encoding: 7bit
- <HTML><HEAD><TITLE></TITLE>
- </HEAD>
- <BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
- <FONT size=2 color=#000000 face="Arial">
- <DIV>
- </DIV>
- <DIV>
- FEDERAL BUREAU OF INVESTIGATIONS</DIV>
- <DIV>
- 935 Pennsylvania Avenue Northwest</DIV>
- <DIV>
- Washington D.C., DC 20535, United States</DIV>
- <DIV>
- Tel/Fax(202) 324-4008</DIV>
- <DIV>
- </DIV>
- <DIV>
- READ THE ATTACHED EMAIL AND COMPLY URGENTLY IT IS VIRUS FREE.</DIV>
- <DIV>
- </DIV>
- <DIV>
- MR ROBERT MUELLER</DIV>
- <DIV>
- DIRECTOR</DIV>
- <DIV>
- UNITED STATES DEPARTMENT OF JUSTICE</DIV>
- <DIV>
- FEDERAL BUREAU OF INVESTIGATIONS</DIV>
- <DIV>
- </DIV>
- </FONT>
- </BODY></HTML>
- ------=_NextPart_000_009E_01C2A9A6.1287B866
- Content-Type: application/octet-stream;
- name="URGENT INFORMATION FOR YOU.txt"
- Content-Transfer-Encoding: base64
- Content-Disposition: attachment;
- filename="URGENT INFORMATION FOR YOU.txt"
- ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
- ICAgICAgICAgICAgICAgICAgICAgICAgDQogICAgICAgICAgICAgICAgICAg
- ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
- ICAgICANCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
- ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIA0KICAgICAgICAgICAg
- ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgDQpGRURFUkFMIEJV
- UkVBVSBPRiBJTlZFU1RJR0FUSU9OUw0KOTM1IFBlbm5zeWx2YW5pYSBBdmVu
- dWUgTm9ydGh3ZXN0DQpXYXNoaW5ndG9uIEQuQy4sIERDIDIwNTM1LCBVbml0
- ZWQgU3RhdGVzDQpUZWwvRmF4KDIwMikgMzI0LTQwMDgNCiANCiANCkF0dGVu
- dGlvbiBCZW5lZmljaWFyeSwNCiANCiAgICAgICAgICAgICAgICAgICAgICAg
- ICAgICAgICAgICAgICAgICAgICBVUkdFTlQgSU5GT1JNQVRJT04gRk9SIFlP
- VSAsRk9SIDIwMTMNCiANClJlY29yZHMgc2hvdyB0aGF0IHlvdSBhcmUgYW1v
- bmcgb25lIG9mIHRoZSBpbmRpdmlkdWFscyBhbmQgb3JnYW5pemF0aW9ucyB3
- aG8gYXJlIHlldCB0byByZWNlaXZlIHRoZWlyIG92ZXJkdWUgcGF5bWVudCBm
- cm9tIG92ZXJzZWFzIHdoaWNoIGluY2x1ZGVzIHRob3NlIG9mIExvdHRlcnkv
- R2FtYmxpbmcsIENvbnRyYWN0IGFuZCBJbmhlcml0YW5jZS4gVGhyb3VnaCBv
- dXIgRnJhdWQgTW9uaXRvcnkgVW5pdCB3ZSBoYXZlIGFsc28gbm90aWNlZCB0
- aGF0IG92ZXIgdGhlIHBhc3QgeW91IGhhdmUgYmVlbiB0cmFuc2FjdGluZyB3
- aXRoIHNvbWUgaW1wb3N0ZXJzIGFuZCBmcmF1ZHN0ZXJzIHdobyBoYXZlIGJl
- ZW4gaW1wZXJzb25hdGluZyB0aGUgbGlrZXMgb2YgUHJvZi4gU29sdWRvIG9m
- IHRoZSBDZW50cmFsIEJhbmsgT2YgTmlnZXJpYSwgTXIuIFBhdHJpY2sgQXpp
- emEsIEFuZGVyc29uLCBXYWxsYWNlIEZyZWQsIG5vbmUgb2ZmaWNpYWxzIG9m
- IE9jZWFuaWMgQmFuaywgWmVuaXRoIEJhbmtzLCBLZWx2aW4gWW91bmcgb2Yg
- SFNCQyxCYW5rIG9mIEFtZXJpY2EgVG9wIG9mZmljaWFscyxDaXRpIEJhbmss
- TWFqb3IgQmFua3MgaW4gU3BhaW4sTG9uZG9uLCBTbWl0aCBXaWxsaWFtcywg
- RGFuaWVsIFdpbHNvbiwgSWJyYWhpbSBTdWxlLCBEci4gUGhpbGlwIE1vcmdh
- biwgRHIuIFVzbWFuIFNoYW1zdWRkZWVuIGFuZCBzb21lIGltcG9zdGVycyBj
- bGFpbWluZyB0byBiZSBUaGUgRmVkZXJhbCBCdXJlYXUgb2YgSW52ZXN0aWdh
- dGlvbi4NCiANClRoZSBDeWJlciBDcmltZSBEaXZpc2lvbiBvZiB0aGUgRkJJ
- IGdhdGhlcmVkIGluZm9ybWF0aW9uIGZyb20gdGhlIEludGVybmV0IENyaW1l
- IENvbXBsYWludCBDZW50ZXIgKElDQ0MpIGZvcm1lcmx5IGtub3duIGFzIHRo
- ZSBJbnRlcm5ldCBGcmF1ZCBDb21wbGFpbnQgQ2VudGVyIChJRkNDKSBvZiBo
- b3cgc29tZSBwZW9wbGUgaGF2ZSBsb3N0IG91dHJhZ2VvdXMgc3VtcyBvZiBt
- b25leSB0byB0aGVzZSBpbXBvc3RlcnMuIEFzIGEgcmVzdWx0IG9mIHRoaXMg
- d2UgaGVyZWJ5IGFkdmlzZSB5b3UgdG8gc3RvcCBjb21tdW5pY2F0aW9uIHdp
- dGggYW55IG9uZSBub3QgcmVmZXJyZWQgdG8geW91IGJ5IHVzLg0KV2UgaGF2
- ZSBuZWdvdGlhdGVkIHdpdGggdGhlIEZlZGVyYWwgTWluaXN0cnkgb2YgRmlu
- YW5jZSB0aGF0IHlvdXIgcGF5bWVudCB0b3RhbGluZyAkNi4xbWlsbGlvbiB1
- bml0ZWQgc3RhdGVkIGRvbGxhcnMgd2lsbCBiZSByZWxlYXNlZCB0byB5b3Ug
- dmlhIGEgY3VzdG9tIHBpbiBiYXNlZCBBVE0gY2FyZCB3aXRoIGEgbWF4aW11
- bSB3aXRoZHJhd2FsIGxpbWl0IG9mIFRocmVlIHRob3VzYW5kIHVzIGRvbGxh
- cnMgJDMsMDAwIGEgZGF5IHdoaWNoIGlzIHBvd2VyZWQgYnkgVmlzYSBDYXJk
- IGFuZCBjYW4gYmUgdXNlZCBhbnl3aGVyZSBpbiB0aGUgd29ybGQgd2VyZSB5
- b3Ugc2VlIGEgVmlzYSBDYXJkIExvZ28gb24gdGhlIEF1dG9tYXRpYyBUZWxs
- ZXIgTWFjaGluZSAoQVRNKS4gV2UgaGF2ZSBhZHZpc2VkIHRoYXQgdGhpcyBz
- aG91bGQgYmUgdGhlIG9ubHkgd2F5IGEgd2hpY2ggeW91IGFyZSB0byByZWNl
- aXZlIHlvdXIgcGF5bWVudCBiZWNhdXNlIGl0P3MgbW9yZSBndWFyYW50ZWVk
- LCBzaW5jZSBvdmVyIEZpZnRlZW4gYmlsbGlvbiB1cyBkb2xsYXJzIHdhcyBs
- b3N0IG9uIGZha2UgY2hlcXVlIGxhc3QgeWVhciAyMDEyLg0KIA0KV2UgZ3Vh
- cmFudGVlIDEwMCUgcmVjZWlwdCBvZiB5b3VyIHBheW1lbnQsIGJlY2F1c2Ug
- d2UgaGF2ZSBwZXJmZWN0ZWQgZXZlcnl0aGluZyBpbiByZWdhcmRzIHRvIHRo
- ZSByZWxlYXNlIG9mIHlvdXIgJDYuMSBtaWxsaW9uIHVuaXRlZCBzdGF0ZWQg
- ZG9sbGFycyB0byBiZSAxMDAlIHJpc2sgZnJlZSBhbmQgZnJlZSBmcm9tIGFu
- eSBoaXRjaGVzIGFzIGl0cyBvdXIgZHV0eSB0byBwcm90ZWN0IGNpdGl6ZW5z
- IG9mIHRoZSBVbml0ZWQgU3RhdGVzIG9mIEFtZXJpY2EuIChUaGlzIGlzIGFz
- IGEgcmVzdWx0IG9mIHRoZSBtYW5kYXRlIGZyb20gVVMgR292ZXJubWVudCB0
- byBtYWtlIHN1cmUgYWxsIGRlYnRzIG93ZWQgdG8gY2l0aXplbnMgb2YgQW1l
- cmljYW4gd2hpY2ggaW5jbHVkZXMgSW5oZXJpdGFuY2UsIENvbnRyYWN0LCBH
- YW1ibGluZy9Mb3R0ZXJ5IGV0YyBhcmUgYmVlbiBjbGVhcmVkIGZvciB0aGUg
- YmV0dGVybWVudCBvZiB0aGUgY3VycmVudCBlY29ub21pYyBzdGF0dXMgb2Yg
- dGhlIG5hdGlvbiBhbmQgaXRzIGNpdGl6ZW5zIGFzIGhlIGhhcyBhbHdheXMg
- YmVsaWV2ZWQgT3VyIFRpbWUgZm9yIENoYW5nZSBoYXMgY29tZSBiZWNhdXNl
- IENoYW5nZSBjYW4gaGFwcGVuKS4NCiANCkJlbG93IGFyZSBmZXcgbGlzdCBv
- ZiB0cmFja2luZyBudW1iZXJzIHlvdSBjYW4gdHJhY2sgZnJvbSBVc3BzIHdl
- YnNpdGUgdG8gY29uZmlybSBwZW9wbGUgbGlrZSB5b3Ugd2hvIGhhdmUgcmVj
- ZWl2ZWQgdGhlaXIgcGF5bWVudCBzdWNjZXNzZnVsbHkuDQogDQpOYW1lIDog
- Q0hBUkxPVFRFIE5FV0VMTDogVXNwcyBUcmFja2luZyBOdW1iZXI6IEVPOTg0
- NTQyNjg4VVMNCiANCiANClRvIHJlZGVlbSB5b3VyIGZ1bmQgeW91IGFyZSBo
- ZXJlYnkgYWR2aXNlZCB0byBjb250YWN0IHRoZSBBVE0gQ2FyZCBDZW50ZXIg
- dmlhIGVtYWlsIGZvciB0aGVpciByZXF1aXJlbWVudCB0byBwcm9jZWVkIGFu
- ZCBwcm9jdXJlIHlvdXIgQXBwcm92YWwgb2YgUGF5bWVudCBXYXJyYW50IGFu
- ZCBFbmRvcnNlbWVudCBvZiB5b3VyIEFUTSBSZWxlYXNlIE9yZGVyIG9uIHlv
- dXIgYmVoYWxmIHdoaWNoIHdpbGwgY29zdCB5b3UgJDEwNSBvbmx5IG5vdGhp
- bmcgbW9yZSBhbmQgbm8gaGlkZGVuIGZlZXMgYXMgZXZlcnl0aGluZyBlbHNl
- IGhhcyBiZWVuIHRha2VuIGNhcmVkIG9mIGJ5IHRoZSBGZWRlcmFsIEdvdmVy
- bm1lbnQgaW5jbHVkaW5nIHRheGVzLCBjdXN0b20gcGFwZXIgYW5kIGNsZWFy
- YW5jZSBkdXR5IHNvIGFsbCB5b3Ugd2lsbCBldmVyIG5lZWQgdG8gcGF5IGlz
- ICQxMDUgb25seS4NCkNvbnRhY3QgSW5mb3JtYXRpb24NCg0KTmFtZTogTXIg
- Tm91bGFuZCBTYW1zb24NCkVtYWlsOiBkcm5vdWxhbmRzYW1zb25Acm9ja2V0
- bWFpbC5jb20NClRlbDogKzEtMzAzLTczMS0yODIzDQpEbyBjb250YWN0IE5v
- dWxhbmQgU2Ftc29uIG9mIHRoZSBBVE0gQ2FyZCBDZW50ZXIgdmlhIGhpcyBj
- b250YWN0IGRldGFpbHMgYWJvdmUgYW5kIGZ1cm5pc2ggaGltIHdpdGggeW91
- ciBkZXRhaWxzIGFzIGxpc3RlZCBiZWxvdzoNCllvdXIgZnVsbCBOYW1lOg0K
- WW91ciBBZGRyZXNzOg0KSG9tZS9DZWxsIFBob25lOg0KT2NjdXBhdGlvbjoN
- CkFnZToNCiANCk9uIGNvbnRhY3RpbmcgaGltIHdpdGggeW91ciBkZXRhaWxz
- IHlvdXIgZmlsZXMgd291bGQgYmUgdXBkYXRlZCBhbmQgaGUgd2lsbCBiZSBz
- ZW5kaW5nIHlvdSB0aGUgcGF5bWVudCBpbmZvcm1hdGlvbiBpbiB3aGljaCB5
- b3Ugd2lsbCB1c2UgaW4gbWFraW5nIHBheW1lbnQgb2YgJDEwNSB0byBoaW0g
- Zm9yIHRoZSBwcm9jdXJlbWVudCBvZiB5b3VyIEFwcHJvdmFsIG9mIFBheW1l
- bnQgV2FycmFudCBhbmQgRW5kb3JzZW1lbnQgb2YgeW91ciBBVE0gUmVsZWFz
- ZSBPcmRlci4gQWZ0ZXIgd2hpY2ggdGhlIGRlbGl2ZXJ5IG9mIHlvdXIgQVRN
- IGNhcmQgd2lsbCBiZSBlZmZlY3RlZCB0byB5b3VyIGRlc2lnbmF0ZWQgaG9t
- ZSBhZGRyZXNzIHdpdGhvdXQgYW55IGZ1cnRoZXIgZGVsYXksIGV4dHJhIGZl
- ZSBvciBhbnkgYXV0aG9yaXR5IHJhaXNpbmcgZXllYnJvdy4NCiANCiANClVw
- b24gcmVjZWlwdCBvZiBwYXltZW50IHRoZSBkZWxpdmVyeSBvZmZpY2VyIHdp
- bGwgZW5zdXJlIHRoYXQgeW91ciBwYWNrYWdlIGlzIHNlbnQgd2l0aGluIDI0
- IHdvcmtpbmcgaG91cnMuIEJlY2F1c2Ugd2UgYXJlIHNvIHN1cmUgb2YgZXZl
- cnl0aGluZyB3ZSBhcmUgZ2l2aW5nIHlvdSBhIDEwMCUgbW9uZXkgYmFjayBn
- dWFyYW50ZWUgaWYgeW91IGRvIG5vdCByZWNlaXZlIHlvdXIgQVRNIENBUkQg
- U2hpcHBtZW50IENvbmZpcm1hdGlvbiB3aXRoaW4gdGhlIG5leHQgMjRocnMg
- YWZ0ZXIgeW91IGhhdmUgbWFkZSB0aGUgcGF5bWVudCBmb3Igc2hpcHBpbmcu
- DQogDQpPbmNlIGFnYWluIHdlIGFyZSBzbyBzdXJlIG9mIHlvdSByZWNlaXZp
- bmcgeW91ciBwYXltZW50IGF0IG5vIGFueSBvdGhlciBjb3N0IGFzIHdlIGhh
- dmUgdGFraW5nIGl0IHVwb24gb3VyIGR1dHkgdG8gbW9uaXRvciBldmVyeXRo
- aW5nIGluIG90aGVyIHRvIGN1YiBjeWJlciBjcmltZSB0aGF0IGlzIHBlcnBl
- dHJhdGVkIGJ5IHRob3NlIGltcG9zdG9ycy5Zb3UgYXJlIHJlcXVlc3RlZCB0
- byBjdXQgZnVydGhlciBjb21tdW5pY2F0aW9ucyB3aXRoIHRoZXNlIGltcG9z
- dG9ycy9mcmF1ZHN0ZXJzIGFzIGNoYXJnZXMgb2YgY29uc2lwcmFjeSB3aWxs
- IGJlIGxldmVsbGVkIGFnYWluc3QgYXMgYW4gYWNjb21wYW5pZXMgaWYgeW91
- IGNvbnRpbnVlLiBmb3J3YXJkIGV2ZXJ5IGNvcnJlc3BvbmRpbmcgZW1haWwg
- cmVjZWl2ZWQgZnJvbSB0aGVtIHRvIHNwYW1tZXNzYWdlc21vbml0b3JpbmdA
- Z21haWwuY29tDQogDQpUaGFua3MgYW5kIGhvcGUgdG8gcmVhZCBmcm9tIHlv
- dSBzb29uLg0KIA0KTVIgUk9CRVJUIE1VRUxMRVINCkRJUkVDVE9SDQpVTklU
- RUQgU1RBVEVTIERFUEFSVE1FTlQgT0YgSlVTVElDRQ0KRkVERVJBTCBCVVJF
- QVUgT0YgSU5WRVNUSUdBVElPTlM=
- ------=_NextPart_000_009E_01C2A9A6.1287B866--
- #MalwareMustDie!
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement