valentine.exe

spam箱にきてた

From:"proactiv@(snip).com"
Phone Love http://68.(snip)/

のようなもの今朝から10通ほど
すべてメッセージもリンク先も違うサイト


AS | IP | AS Name
17511 | 219.75.xxx.xxx | K-OPTICOM K-Opticom Corporation
7132 | 69.214.xxx.xxx | SBIS-AS - AT&T Internet Services
7016 | 67.163.xxx.xxx | CCCH-AS2 - Comcast Cable Communications Holdings, Inc
33651 | 67.180.xxx.xxx | DNEO-OSP7 - Comcast Cable Communications, Inc.
12322 | 82.229.xxx.xxx | PROXAD AS for Proxad/Free ISP
9198 | 89.218.xxx.xxx | KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration
33287 | 68.81.xxx.xxx | DNEO-OSP4 - Comcast Cable Communications, Inc.
7132 | 70.242.xxx.xxx | SBIS-AS - AT&T Internet Services
7132 | 68.75.xxx.xxx | SBIS-AS - AT&T Internet Services
33668 | 68.41.xxx.xxx | DNEO-OSP7 - Comcast Cable Communications, Inc.

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<meta http-equiv="refresh" content="5;url=valentine.exe">
<title>Your Valentine</title>
<body>
<center>
<a href="valentine.exe"><img border=0 src="4.gif"><br></a>
</center>
</body>
</html>
  • GIFの種類は8種類確認できた
  • valentine.exe: MS Windows PE 32-bit Intel 80386 GUI executable not relocatable