wendy.zip - encrypted - mimail

Raymond Dijkxhoorn raymond at PROLOCATION.NET
Thu Dec 4 15:00:41 GMT 2003


Hi!

> # NEW DETECTIONS
> ...
> # INTERNET WORM (33)
> # ------------------
> ...
> # W32/MIMAIL.L at MM <--
> ...
> # NEW REMOVALS
> # INTERNET WORM (33)
> # ------------------
> ...
> # W32/MIMAIL.L at MM <--
> ...
>
> However, later yesternight, a wendy.zip passed thru... would that be
> innocuous? or a newer version of mimail?

Most likely the new M version.

http://www.sophos.com/virusinfo/analyses/w32mimailm.html

> Otherwise, a sample of possible subjects might help me find one thru one
> of my unprotected spamtraps

Subject line: Re[3]<44 spaces><random characters>

Message text:

Hello Greg,



I was shocked, when I found out that it wasn't you but your twin
brother!!! That's amazing, you're as like as two peas. No one in bed is
better than you Greg. I remember, I remember everything very well, that
promised you to tell how it was, I'll give you a call today after 9.



He took my skirt off, then my panties, then my bra, he sucked my tits,
with the same fury you do it. He was writing alphabet on my pussy for 20
minutes, then suddenly stopped, put me in doggy style position and stuck
his dagger.But Greg, why didn't you warn me that his dick is 15 inches
long?? I was struck, we

fucked whole night.



I'm so thankful to you, for acquainted me to your brother. I think we can
do it on the next Saturday all three together? What do you think? O yes,
as you wanted I've made a few pictures check them out in archive, I hope
they will excite you, and you will dream of our new meeting...



Wendy.



Attached file: only_for_greg.zip (contains for_greg.jpg.exe)



The second email format, which appears to have been manually mass-mailed
out, has the following characteristics:



Subject line: Re:Greg

Message text:

Hi Greg its Wendy.



I was shocked, when I found out that it wasn't you but your twin brother,
that's amazing, you're as like as two peas. No one in bed is better than
you Greg. I remember, I remember everything very well, that promised you
to tell how it was, I'll give you a call today after 9.



He took my skirt off, then my panties, then my bra, he sucked my tits,
with the same fury you do it. He was writing alphabet on my pussy for 20
minutes, then suddenly stopped, put me in doggy style position and stuck
his dagger. But Greg, why didn't you warn me that his dick is 15 inches
long? I was struck, we fucked whole night.



I'm so thankful to you, for acquainted me to your brother. I think we can
do it on the next Saturday all three together? What do you think? O yes,
as you wanted I've made a few pictures check them out in archive, I hope
they will excite you, and you will dream of our new meeting...



For unzip archiver download WinZip:
http://download.winzip.com/winzip81.exe

Password for archive is "kiss".



Attached file: wendy.zip (contains file wendy.exe)

this is most likely better material for the SPAM-L.

Bye,
Raymond



More information about the MailScanner mailing list