-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Why not do a strings and see which functions are imported? Even better, why not just assume it's mal-ware or porn-ad-ware? Joshua b. Jore http://www.greentechnologist.org On Fri, 2 Nov 2001, Munir Nassar wrote: > I just got this email without To: field or a From: field > > here is the header from the mbox file: > > <CUT HERE> > >From MAILER-DAEMON at RedConcepts.NET Fri Nov 2 13:36:05 2001 > Return-Path: <MAILER-DAEMON at RedConcepts.NET> > Received: from kuk (modem249-p72.dravanet.hu [212.40.75.249]) > by RedConcepts.NET (8.11.2/8.11.2) with SMTP id fA2JZuv19185 > for <nassarmu at redconcepts.net>; Fri, 2 Nov 2001 13:35:57 -0600 > Date: Fri, 2 Nov 2001 13:35:57 -0600 > Message-Id: <200111021935.fA2JZuv19185 at RedConcepts.NET> > MIME-Version: 1.0 > Content-Type: multipart/mixed; boundary="--VEKXQJK1UZ4DY3GLMV096F85MB" > Status: RO > X-Status: > X-Keywords: > X-UID: 16 > <END CUT> > > it came with a .EXE file attachement "GPPFJJGP.EXE, i dont have a spare 95 > box around to see what the attachment does, any clues? > > -munir > > -- > > _______________________________________________ > Twin Cities Linux Users Group Mailing List - Minneapolis/St. Paul, Minnesota > http://www.mn-linux.org > tclug-list at mn-linux.org > https://mailman.mn-linux.org/mailman/listinfo/tclug-list > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (OpenBSD) Comment: For info see http://www.gnupg.org iD8DBQE8hQ/LfexLsowstzcRAtbcAJ0W5BJbk0nL9MrflR6BH4Htj5UYKwCg8o26 g8DRFFUeKu9RtvdeyyqlMCw= =mLZo -----END PGP SIGNATURE-----