информационная безопасность
без паники и всерьез
 подробно о проектеRambler's Top100
Портрет посетителяВсе любят медСетевые кракеры и правда о деле Левина
BugTraq.Ru
Русский BugTraq
 Анализ криптографических сетевых... 
 Модель надежности двухузлового... 
 Специальные марковские модели надежности... 
 Бэкдор в xz/liblzma, предназначенный... 
 Три миллиона электронных замков... 
 Doom на газонокосилках 
главная обзор RSN блог библиотека закон бред форум dnet о проекте
bugtraq.ru / форум / sysadmin
Имя Пароль
ФОРУМ
все доски
FAQ
IRC
новые сообщения
site updates
guestbook
beginners
sysadmin
programming
operating systems
theory
web building
software
hardware
networking
law
hacking
gadgets
job
dnet
humor
miscellaneous
scrap
регистрация





Легенда:
  новое сообщение
  закрытая нитка
  новое сообщение
  в закрытой нитке
  старое сообщение
  • Напоминаю, что масса вопросов по функционированию форума снимается после прочтения его описания.
  • Новичкам также крайне полезно ознакомиться с данным документом.
Верно! Уже ближе... Открыл блокнотом тот .bin что 5 мег. 23.09.08 23:01  Число просмотров: 3694
Автор: ncoder Статус: Незарегистрированный пользователь
<"чистая" ссылка>
Верно! Уже ближе... Открыл блокнотом тот .bin что 5 мег.
Имеем заголовок и часть кода base64. Просто вставлять в онлайн декодер текст пробовал, белиберда получается. Похоже в теле письма еще и zip-вложение было... Кто сможет компетентно отделить мух от котлет?

Reply-To: "HelpDesk" <xx@xxx.xxxxx.com>
From: "HelpDesk" <xx@xxx.xxxxx.com>
To: <xxxxx@xxxxx.ru>
Subject: =?koi8-r?B?/M7Gz9LUwSwgxMXUwczJ2sHDydE=?=
Date: Tue, 16 Sep 2008 17:34:16 +0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_046D_01C91822.71E138B0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3028
Disposition-Notification-To: "HelpDesk" <xx@xxx.xxxxx.com>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028

This is a multi-part message in MIME format.

------=_NextPart_000_046D_01C91822.71E138B0
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_046E_01C91822.71E138B0"


------=_NextPart_001_046E_01C91822.71E138B0
Content-Type: text/plain;
charset="koi8-r"
Content-Transfer-Encoding: quoted-printable

=E4=CF=C2=D2=D9=CA =C4=C5=CE=D8!=20

=F0=D2=C5=C4=CF=D3=D4=C1=D7=CC=D1=C5=CD =F7=C1=CD =
=C4=C5=D4=C1=CC=C9=DA=C1=C3=C9=C0 =D4=D2=C1=C6=C9=CB=C1 - =
=D3=D7=C5=D2=CE=D5=D4=C1=D1 =D3 1 =D0=CF 31 =C1=D7=C7=D5=D3=D4=C1 2008



=F0=D2=C9=CE=C1=C4=CC=C5=D6=CE=CF=D3=D4=D8 IP =C1=C4=D2=C5=D3=C1 =
=CD=CF=D6=CE=CF =D5=DA=CE=C1=D4=D8 =CE=C1 =D3=C1=CA=D4=C5 =
http://lg.transtk.ru/, =D7=D7=CF=C4=D1 =
=C9=CE=D4=C5=D2=C5=D3=D5=C0=DD=C9=CA =D7=C1=D3 IP =C1=C4=D2=C5=D3 =D7 =
=D0=CF=CC=C5 whois =20

=20

=F0=CF=D1=D3=CE=C5=CE=C9=D1:

src IP addr - =D3 =CB=C1=CB=CF=C7=CF IP =C1=C4=D2=C5=D3=C1 =
=D0=CF=CC=D5=DE=C5=CE=C1 =C9=CE=C6=CF=D2=CD=C1=C3=C9=D1

dst IP addr - =CE=C1 =CB=C1=CB=CF=CA IP =C1=C4=D2=C5=D3 =
=D0=CF=CC=D5=DE=C5=CE=C1 =C9=CE=C6=CF=D2=CD=C1=C3=C9=D1

bytes - =CB=CF=CC=C9=DE=C5=D3=D4=D7=CF =C2=C1=CA=D4=CF=D7=20

ifindex - =D3=CC=D5=D6=C5=C2=CE=C1=D1 =C9=CE=C6=CF=D2=CD=C1=C3=C9=D1 - =
=D0=CF =CB=C1=CB=CF=CD=D5 =CB=C1=CE=C1=CC=D5 =D0=D2=CF=DB=CC=C1 =
=C9=CE=C6=CF=D2=CD=C1=C3=C9=D1

=20

=E5=D3=CC=C9 =CE=C1 =D7=C1=DB IP =C1=C4=D2=C5=D3 - =DA=CE=C1=DE=C9=D4 =
=DC=D4=CF =D7=C8=CF=C4=D1=DD=C9=CA =D4=D2=C1=C6=C9=CB =
(=D4=C1=D2=C9=C6=C9=C3=C9=D2=D5=C5=D4=D3=D1)

=E5=D3=CC=C9 =D3 =CE=C5=C7=CF - =D4=CF =C9=D3=C8=CF=C4=D1=DD=C9=CA =
(=CE=C5 =D4=C1=D2=C9=C6=C9=C3=C9=D2=D5=C5=D4=D3=D1)



=CB=CF=CE=D4=D2=CF=CC=C9=D2=CF=D7=C1=D4=D8 =D7=C1=DB =D4=D2=C1=C6=C9=CB =
=D7=D9 =CD=CF=D6=C5=D4=C5 =C9=DA =CC=C9=DE=CE=CF=C7=CF =
=CB=C1=C2=C9=CE=C5=D4=C1

www.enforta.com - =EC=C9=DE=CE=D9=CA =CB=C1=C2=C9=CE=C5=D4 - =
=E7=CF=D2=CF=C4 =EF=CD=D3=CB - =F0=CF=D3=D4=CF=D1=CE=CE=CF=C5 =
=D0=CF=C4=CB=CC=C0=DE=C5=CE=C9=C5 -

=CC=CF=C7=C9=CE (IP =C1=C4=D2=C5=D3) - =D0=D2=C9 =
=C9=D3=D0=CF=CC=D8=DA=CF=D7=C1=CE=C9=C9 =CE=C1=DB=C5=C7=CF =
=D0=CF=C4=CB=CC=C0=DE=C5=CE=C9=D1 =CF=D0=D2=C5=C4=C5=CC=D1=C0=D4=D3=D1 =
=C1=D7=D4=CF=CD=C1=D4=C9=DE=C5=D3=CB=C9 (=C9=CE=C1=DE=C5 =
=D7=D7=CF=C4=C9=D4=D8 =D7=D2=D5=DE=CE=D5=C0)

=D0=C1=D2=CF=CC=D8 =3D 11111

=D7 =EC=C9=DE=CE=CF=CD =CB=C1=C2=C9=CE=C5=CE=D4=C5 =D0=C1=D2=CF=CC=D8 =
=CD=CF=D6=C5=D4=C5 =D0=CF=CD=C5=CE=D1=D4=D8

=F7 =F4=D2=C1=C6=C9=CB=C5 =CD=CF=D6=C5=D4=C5 =
=D0=CF=D3=CD=CF=D4=D2=C5=D4=D8 =CC=C0=C2=CF=CA =D4=D2=C1=C6=C9=CB =DA=C1 =
=CC=C0=C2=CF=CA =D0=C5=D2=C9=CF=C4


=F3 =D5=D7=C1=D6=C5=CE=C9=C5=CD,
=F3=C9=D7=C1=CB =F7=C9=D4=C1=CC=C9=CA
=EE=C1=DE=C1=CC=D8=CE=C9=CB =CF=D4=C4=C5=CC=C1 =
=D0=CF=C4=C4=C5=D2=D6=CB=C9 =D0=CF=CC=D8=DA=CF=D7=C1=D4=C5=CC=C5=CA
=EF=CD=D3=CB=C9=CA =C6=C9=CC=C9=C1=CC =FA=E1=EF "=F0=D2=C5=D3=D4=C9=D6 =
=E9=CE=D4=C5=D2=CE=C5=D4"
=EB=CF=CD=D0=C1=CE=C9=D1 =FC=CE=C6=CF=D2=D4=C1
=C7. =EF=CD=D3=CB, =D5=CC. =E1=CE=C7=C1=D2=D3=CB=C1=D1, 14
Web: www.enforta.com
=F4=C5=CC.: 8-(3812)-433-633
=E6=C1=CB=D3: 8-(3812)-433-733
------=_NextPart_001_046E_01C91822.71E138B0
Content-Type: text/html;
charset="koi8-r"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dkoi8-r">
<META content=3D"MSHTML 6.00.6000.16414" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>
<DIV>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt"><SPAN lang=3DX-NONE=20
style=3D"mso-ansi-language: X-NONE; mso-bidi-font-weight: =
bold">=E4=CF=C2=D2=D9=CA =C4=C5=CE=D8!=20
</SPAN></P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt"><SPAN lang=3DX-NONE=20
style=3D"mso-ansi-language: X-NONE; mso-bidi-font-weight: =
bold">=F0=D2=C5=C4=CF=D3=D4=C1=D7=CC=D1=C5=CD =F7=C1=CD=20
=C4=C5=D4=C1=CC=C9=DA=C1=C3=C9=C0 =D4=D2=C1=C6=C9=CB=C1 - =
=D3=D7=C5=D2=CE=D5=D4=C1=D1 =D3 1 =D0=CF 31 =C1=D7=C7=D5=D3=D4=C1 =
2008</SPAN></P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt"><SPAN lang=3DX-NONE=20
style=3D"mso-ansi-language: X-NONE; mso-bidi-font-weight: =
bold"></SPAN> </P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt"><SPAN lang=3DX-NONE=20
style=3D"mso-ansi-language: X-NONE; mso-bidi-font-weight: =
bold"> =F0=D2=C9=CE=C1=C4=CC=C5=D6=CE=CF=D3=D4=D8=20
IP =C1=C4=D2=C5=D3=C1 =CD=CF=D6=CE=CF =D5=DA=CE=C1=D4=D8 =CE=C1 =
=D3=C1=CA=D4=C5 <A=20
href=3D"http://lg.transtk.ru/">http://lg.transtk.ru/</A>
, =
=D7=D7=CF=C4=D1 =C9=CE=D4=C5=D2=C5=D3=D5=C0=DD=C9=CA=20
=D7=C1=D3 IP =C1=C4=D2=C5=D3 =D7 =D0=CF=CC=C5 whois  </SPAN></P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt"><?xml:namespace =
prefix =3D o ns =3D=20
"urn:schemas-microsoft-com:office:office"=20
/><o:p> </o:p><o:p> </o:p></P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm =
0pt">=F0=CF=D1=D3=CE=C5=CE=C9=D1:</P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt">src IP addr – =
=D3 =CB=C1=CB=CF=C7=CF IP =C1=C4=D2=C5=D3=C1=20
=D0=CF=CC=D5=DE=C5=CE=C1 =C9=CE=C6=CF=D2=CD=C1=C3=C9=D1</P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt">dst IP addr – =
=CE=C1 =CB=C1=CB=CF=CA IP =C1=C4=D2=C5=D3=20
=D0=CF=CC=D5=DE=C5=CE=C1 =C9=CE=C6=CF=D2=CD=C1=C3=C9=D1</P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt">bytes – =
=CB=CF=CC=C9=DE=C5=D3=D4=D7=CF =C2=C1=CA=D4=CF=D7 </P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt">ifindex – =
=D3=CC=D5=D6=C5=C2=CE=C1=D1=20
=C9=CE=C6=CF=D2=CD=C1=C3=C9=D1 - =D0=CF =CB=C1=CB=CF=CD=D5 =
=CB=C1=CE=C1=CC=D5 =D0=D2=CF=DB=CC=C1 =C9=CE=C6=CF=D2=CD=C1=C3=C9=D1</P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt"><o:p> </o:p></P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt">=E5=D3=CC=C9 =CE=C1 =
=D7=C1=DB IP =C1=C4=D2=C5=D3 – =DA=CE=C1=DE=C9=D4 =DC=D4=CF=20
=D7=C8=CF=C4=D1=DD=C9=CA =D4=D2=C1=C6=C9=CB =
(=D4=C1=D2=C9=C6=C9=C3=C9=D2=D5=C5=D4=D3=D1)</P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt">=E5=D3=CC=C9 =D3 =
=CE=C5=C7=CF – =D4=CF =C9=D3=C8=CF=C4=D1=DD=C9=CA (=CE=C5=20
=D4=C1=D2=C9=C6=C9=C3=C9=D2=D5=C5=D4=D3=D1)</P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt"> </P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt"><FONT face=3DArial=20
size=3D2>=CB=CF=CE=D4=D2=CF=CC=C9=D2=CF=D7=C1=D4=D8 =D7=C1=DB =
=D4=D2=C1=C6=C9=CB =D7=D9 =CD=CF=D6=C5=D4=C5 =C9=DA =
=CC=C9=DE=CE=CF=C7=CF =CB=C1=C2=C9=CE=C5=D4=C1</FONT></P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt"><FONT face=3DArial =
size=3D2><A=20
href=3D"http://www.enforta.com/">www.enforta.com</A> - =
=EC=C9=DE=CE=D9=CA =CB=C1=C2=C9=CE=C5=D4 - =E7=CF=D2=CF=C4 =EF=CD=D3=CB=20
- =F0=CF=D3=D4=CF=D1=CE=CE=CF=C5 =D0=CF=C4=CB=CC=C0=DE=C5=CE=C9=C5 =
-</FONT></P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt"><FONT face=3DArial=20
size=3D2>=CC=CF=C7=C9=CE  (IP =C1=C4=D2=C5=D3)  - =D0=D2=C9 =
=C9=D3=D0=CF=CC=D8=DA=CF=D7=C1=CE=C9=C9 =CE=C1=DB=C5=C7=CF =
=D0=CF=C4=CB=CC=C0=DE=C5=CE=C9=D1=20
=CF=D0=D2=C5=C4=C5=CC=D1=C0=D4=D3=D1 =
=C1=D7=D4=CF=CD=C1=D4=C9=DE=C5=D3=CB=C9 (=C9=CE=C1=DE=C5 =
=D7=D7=CF=C4=C9=D4=D8 =D7=D2=D5=DE=CE=D5=C0)</FONT></P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt"><FONT face=3DArial =
size=3D2>=D0=C1=D2=CF=CC=D8 =3D=20
11111</FONT></P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt"><FONT face=3DArial =
size=3D2>=D7 =EC=C9=DE=CE=CF=CD=20
=CB=C1=C2=C9=CE=C5=CE=D4=C5 =D0=C1=D2=CF=CC=D8 =CD=CF=D6=C5=D4=C5 =
=D0=CF=CD=C5=CE=D1=D4=D8</FONT></P>
<P class=3DMsoNormal style=3D"MARGIN: 0cm 0cm 0pt"><FONT face=3DArial =
size=3D2>=F7 =F4=D2=C1=C6=C9=CB=C5=20
=CD=CF=D6=C5=D4=C5 =D0=CF=D3=CD=CF=D4=D2=C5=D4=D8 =CC=C0=C2=CF=CA =
=D4=D2=C1=C6=C9=CB =DA=C1 =CC=C0=C2=CF=CA =
=D0=C5=D2=C9=CF=C4</FONT></P></DIV></FONT></DIV>
<DIV><FONT face=3DArial size=3D2><BR>=F3 =
=D5=D7=C1=D6=C5=CE=C9=C5=CD,<BR>=F3=C9=D7=C1=CB =
=F7=C9=D4=C1=CC=C9=CA<BR>=EE=C1=DE=C1=CC=D8=CE=C9=CB=20
=CF=D4=C4=C5=CC=C1 =D0=CF=C4=C4=C5=D2=D6=CB=C9 =
=D0=CF=CC=D8=DA=CF=D7=C1=D4=C5=CC=C5=CA<BR>=EF=CD=D3=CB=C9=CA =
=C6=C9=CC=C9=C1=CC =FA=E1=EF "=F0=D2=C5=D3=D4=C9=D6=20
=E9=CE=D4=C5=D2=CE=C5=D4"<BR>=EB=CF=CD=D0=C1=CE=C9=D1 =
=FC=CE=C6=CF=D2=D4=C1<BR>=C7. =EF=CD=D3=CB, =D5=CC. =
=E1=CE=C7=C1=D2=D3=CB=C1=D1, 14<BR>Web: <A=20
href=3D"http://www.enforta.com">www.enforta.com</A><BR>=F4=C5=CC.:=20
8-(3812)-433-633<BR>=E6=C1=CB=D3: =
8-(3812)-433-733</FONT></DIV></BODY></HTML>

------=_NextPart_001_046E_01C91822.71E138B0--

------=_NextPart_000_046D_01C91822.71E138B0
Content-Type: application/octet-stream;
name="08_01_2008_000000_08_31_2008_235959_371_2.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="08_01_2008_000000_08_31_2008_235959_371_2.zip"

UEsDBBQAAAAIAIiDMDn4187klNM6AECMRAEtABUAMDhfMDFfMjAwOF8wMDAwMDBfMDhfMzFfMjAw
OF8yMzU5NTlfMzcxXzIuY3N2VVQJAAMwfM9IzVvPSFV4BAD2AfYBjP1Jzi3NkiQGzhP49xArOLC+
wb8CzriFqkoOOGEVmEmguHuqqLV+jqh/LyMeIt+9cv14Y6amjajo//5//P/+r//5X//7//Hf/7f/
/7//9T/+z//Pf/0v/+t//b/++3//P//9r//v//U/r7/67//jf56/+n//3//zf/sf//w33/9t9ROS
/4TgP9H96/O/JXx8yZ+Y5H//9T5471rxIQn6+y9//rWrucTSQuCXDr5++qeVj1z03+pyDi2XoBf2
PX2K4OPHu/B75RRbrMHV/s9/C+4vsE+1tZSzXjh4QeUs/0mf1n/Bcrsl+1z9RF93+IMNLvroek/8
8a7bkn8dXHCu++QfL67IjTh2Ze/k6brXKz/B7gubY+p6zVo/rcmdfgq5Yk8OL3ggm5Nn//jQPvkX
2XJqMTc3HupCfv9wdO31wbP8r/wb+Va1zs8KaHbyH36TtcbifG6PVyTfqpZfbAm9hlj8vm7Cs8u1
I3mm3GtyMZQDxl/FT2kEW332LaXvdZjICs9OFpeP4XsZMmxJJUTn78uON/S7upPvLgV/X9WAxu5L
THUu1vBJ8rceK5ZcNafSfYw/WLILkuuhyl18bRl5w+TBkmu+t7kIgysf+boh+o/vZDPGXkrwea7D
KH8cPvlTyP3GWnqu87ItfGT7fKJ+Y7ZrQ5dVdt6DL+lT/Yd8XlkyUfZi+LEGPtALe3mM4L6+mtwL
wYZYa6j567NxrNgj58v3Zakt6LJ9suvfl6XLIcnq7e08m+zf4NInkT0RvewJ+Z99D14MSBcb0yID
lyqG3zDkz4eNLjT5/seQezGg8pIrWQ6h5xz9XGhnA1VyC3LRIFeqX3uNQeV48muzi/Vy7VPxeOzl
1laaWMafzc5uQE6zkNv3DVCsl7XwtdfDh1mmkLOcfOH5dTnUOxym37daCbIW/L/0/abYNVv1tft1
p1n3o6+yL9kLgAVrZd3rO7g1sWFxW3L5DlX2mWPHaE4wuP3PU1QOd8HKmp7eR5fryh1godO1lV3r
IRd+3ecpEFJ0NSZ2oLkv6DZ0SVwDnFCN/Xbsci7PkyxgAcIm9U9krzXmHpMa8f6F/Tlyy7BETV6l
vJCIDcsu6EvpMRsPfh3pgpSNGs7n9yXoiUvMfPByKvTwdeDir9ktuCLm2MVfS8Su7ErJZbpcuDe5
qm/y1+RkEmyKw2oxZzXJQsGPyZqsgs05t+1RXuuVeYm9ipfg8+/iZp9XVpZ/d/uWiW5d3kQp250M
Yom6/3RyNHlxf7uscsNbXisDp7AsoyZLLJTy83DiopNL1+hTL+3n6ShavOVwHOAgaPlt5gH7GmTt
1v69zAP7zLK25Ol6+V7nAH8vdLm1VJZXi3tNsnwSWQ8eJrn3+GUVG/v9IK59i+XLLDKoHEnyHdq+
AfE7xFLKTZCr5tpqajMeKrjLD74vu1cxCeIgrPUIu9nFoojXToOWLDtofYWi7o9Pmfu38hc5hXmK
TK/KZ7rZZBdXcfvi/rzi7cpK+NBDrJXS5qNJtIWtLlAxD+zhQi1ykrm9HmUfJyMgC1X8y5i+b8FH
9iLgNOeSfixJZx9DtnwqpV7xkIYRBOlrk09qRDDBybKU9x2dWmzx52VB/EYE7NmcLMiA1/DlJBBs
LUn+/PfB2GW9vIM4v5rgZKHJ6RfpgzncgjsvN0nkIK+XfTPZjTnm/vMhKLaII9xXFI2vW/QU8Qa6
yU5w1ut9Bglip8WsVQ5+hLXORTnTDcv7vU3ELDjx9sfOfJwMv+FxwxHs9m6LYXwO8im6+EtuhvH7
<sysadmin> Поиск 






Rambler's Top100
Рейтинг@Mail.ru


  Copyright © 2001-2024 Dmitry Leonov   Page build time: 0 s   Design: Vadim Derkach