TR: Malware found in HERCULES MAINFRAME 4.0 32 bits
| Newsgroups | gmane.comp.emulators.turnkey-mvs |
|---|---|
| Message-ID | <!&!AAAAAAAAAAAYAAAAAAAAABzmNO2A/2NHveViF+JTkijCgAAAEAAAAH+KE1HgH3hOqEIXpjMS0gwBAAAAAA==@skynet.be> |
------=_NextPart_000_00DB_01D6A345.A7338250 Content-Type: multipart/alternative; boundary="----=_NextPart_001_00DC_01D6A345.A733A960" ------=_NextPart_001_00DC_01D6A345.A733A960 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable =20 =20 De : [email protected] <[email protected]>=20 Envoy=E9 : jeudi 15 octobre 2020 15:07 =C0 : '[email protected]' <[email protected]> Objet : Malware found in HERCULES MAINFRAME 4.0 32 bits =20 Hi to all of you? =20 Suppose you are all in good health. =20 I scanned my machine and i found : Gen :Variant.Razy.743703 and another : Gen.Variant.Razy0685463 =20 Does anybody found the same malware into HERCULES 4.0 32 bits ? =20 Tks for response. =20 Best regards =20 Derry GENIQUE 16 Place Nicolas JENART 7390 QUAREGNON Belgique. Tel : 0032 65 79 27 06 GSM : 0032 498 67 09 45 E-Mail : [email protected] <mailto:[email protected]>=20=20 =20 ------=_NextPart_001_00DC_01D6A345.A733A960 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/htm= l4/strict.dtd"> <html> <head> </head> =20 <body style=3D"background-color: #fff;"> <span style=3D"display:none"> </span> <!--~-|**|PrettyHtmlStartT|**|-~--> <div id=3D"ygrp-mlmsg" style=3D"position:relative;"> <div id=3D"ygrp-msg" style=3D"z-index: 1;"> <!--~-|**|PrettyHtmlEndT|**|-~--> <div id=3D"ygrp-text" > =20=20=20=20=20=20 =20=20=20=20=20=20 <p> <div class=3D"WordSection1"><p class=3D"MsoNormal"><o> </o></p><p clas= s=3D"MsoNormal"><o> </o></p><div><div style=3D"border-top:solid #E1E1E= 1 1.0pt;padding:3.0pt 0cm 0cm 0cm;"><p class=3D"MsoNormal"><b><span lang=3D= "FR">De :</span></b><span lang=3D"FR"> [email protected] <bk242897= @skynet.be> <br><b>Envoy=E9 :</b> jeudi 15 octobre 2020 15:07<br><b= >=C0 :</b> '[email protected]' <[email protected]= om><br><b>Objet :</b> Malware found in HERCULES MAINFRAME 4.0 32 bi= ts<o></o></span></p></div></div><p class=3D"MsoNormal"><o> </o></p><p = class=3D"MsoNormal">Hi to all of you?<o></o></p><p class=3D"MsoNormal"= ><o> </o></p><p class=3D"MsoNormal">Suppose you are all in good health= ..<o></o></p><p class=3D"MsoNormal"><o> </o></p><p class=3D"MsoNormal">= I scanned my machine and i found : <b><span style=3D"font-size:1= 4.0pt;">Gen :Variant.Razy.743703</span></b> and another <b><span = style=3D"font-size:14.0pt;">: Gen.Variant.Razy0685463<o></o></span></= b></p><p class=3D"MsoNormal"><o> </o></p><p class=3D"MsoNormal">Does a= nybody found the same malware into HERCULES 4.0 32 bits ?<o></o>= </p><p class=3D"MsoNormal"><o> </o></p><p class=3D"MsoNormal">Tks for = response.<o></o></p><p class=3D"MsoNormal"><o> </o></p><p class=3D"Mso= Normal">Best regards<o></o></p><p class=3D"MsoNormal"><o> </o></p><p c= lass=3D"MsoNormal"><b><span>Derry GENIQUE<o></o></span></b></p><p class=3D"= MsoNormal"><b><span>16 Place Nicolas JENART<o></o></span></b></p><p class= =3D"MsoNormal"><b><span>7390 QUAREGNON<o></o></span></b></p><p class=3D"Mso= Normal"><b><span>Belgique.<o></o></span></b></p><p class=3D"MsoNormal"><b><= span>Tel : 0032 65 79 27 06<o></o></span></b></p><p class=3D"MsoNormal= "><b><span>GSM : 0032 498 67 09 45<o></o></span></b></p><p class=3D"Ms= oNormal"><b><span>E-Mail : <a href=3D"mailto:[email protected]">bk242= [email protected]</a> <o></o></span></b></p><p class=3D"MsoNormal"><o> </o= ></p></div></p> </div> =20=20=20=20=20 <!--~-|**|PrettyHtmlStart|**|-~--> <div style=3D"color: #fff; height: 0;">__._,_.___</div> =20=20=20=20=20=20=20=20=20=20 =20=20 =20 =20=20=20=20 <div style=3D"clear:both"> </div> <div id=3D"fromDMARC" style=3D"margin-top: 10px;"> <hr style=3D"height:2px ; border-width:0; color:#E3E3E3; background= -color:#E3E3E3;"> Posted by: <[email protected]> <hr style=3D"height:2p= x ; border-width:0; color:#E3E3E3; background-color:#E3E3E3;"> </div> <div style=3D"clear:both"> </div> <table cellspacing=3D4px style=3D"margin-top: 10px; margin-bottom: 10px= ; color: #2D50FD;"> <tbody> <tr> <td style=3D"font-size: 12px; font-family: arial; font-weight: bo= ld; padding: 7px 5px 5px;" > <a style=3D"text-decoration: none; color: #2D50FD= " href=3D"https://groups.yahoo.com/neo/groups/turnkey-mvs/conversations/mes= sages/11429;_ylc=3DX3oDMTJxc21nNXNtBF9TAzk3MzU5NzE0BGdycElkAzgxNjExNjIEZ3Jw= c3BJZAMxNzA1MDA2NTU5BG1zZ0lkAzExNDI5BHNlYwNmdHIEc2xrA3JwbHkEc3RpbWUDMTYwMjc= 5NTA2NA--?act=3Dreply&messageNum=3D11429">Reply via web post</a> </td> <td>•</td> <td style=3D"font-size: 12px; font-family: arial; padding: 7px 5p= x 5px;" > <a href=3D"mailto:[email protected]?subject=3DRe%3A%20TR%3A%20= Malware%20found%20in%20HERCULES%20MAINFRAME%204%2E0%2032%20bits" style=3D"t= ext-decoration: none; color: #2D50FD;"> Reply to sender </a> </td> <td>•</td> <td style=3D"font-size: 12px; font-family: arial; padding: 7px 5p= x 5px;"> <a href=3D"mailto:[email protected]?subject=3DRe%3A%2= 0TR%3A%20Malware%20found%20in%20HERCULES%20MAINFRAME%204%2E0%2032%20bits" s= tyle=3D"text-decoration: none; color: #2D50FD"> Reply to group </a> </td> <td>•</td> <td style=3D"font-size: 12px; font-family: arial; padding: 7px 5p= x 5px;" > <a href=3D"https://groups.yahoo.com/neo/groups/turnkey-mvs/conv= ersations/newtopic;_ylc=3DX3oDMTJlbjNvcXUyBF9TAzk3MzU5NzE0BGdycElkAzgxNjExN= jIEZ3Jwc3BJZAMxNzA1MDA2NTU5BHNlYwNmdHIEc2xrA250cGMEc3RpbWUDMTYwMjc5NTA2NA--= " style=3D"text-decoration: none; color: #2D50FD">Start a New Topic</a> </td> <td>•</td> <td style=3D"font-size: 12px; font-family: arial; padding: 7px 5p= x 5px;color: #2D50FD;" > <a href=3D"https://groups.yahoo.com/neo/groups/= turnkey-mvs/conversations/topics/11429;_ylc=3DX3oDMTM2bjczZG8zBF9TAzk3MzU5N= zE0BGdycElkAzgxNjExNjIEZ3Jwc3BJZAMxNzA1MDA2NTU5BG1zZ0lkAzExNDI5BHNlYwNmdHIE= c2xrA3Z0cGMEc3RpbWUDMTYwMjc5NTA2NAR0cGNJZAMxMTQyOQ--" style=3D"text-decorat= ion: none; color: #2D50FD;">Messages in this topic</a> (1) </td> </tr> </tbody> </table> =20=20=20=20=20=20=20=20 <!------- Start Nav Bar ------> =20 <!-- |**|begin egp html banner|**| --> <div id=3D"ygrp-vital" style=3D"background-color: #f2f2f2; font-family: Ver= dana; font-size: 10px; margin-bottom: 10px; padding: 10px;"> <span id=3D"vithd" style=3D"font-weight: bold; color: #333; text-transf= orm: uppercase; "><a href=3D"https://groups.yahoo.com/neo/groups/turnkey-mv= s/info;_ylc=3DX3oDMTJldXNmMHN1BF9TAzk3MzU5NzE0BGdycElkAzgxNjExNjIEZ3Jwc3BJZ= AMxNzA1MDA2NTU5BHNlYwN2dGwEc2xrA3ZnaHAEc3RpbWUDMTYwMjc5NTA2NA--" style=3D"t= ext-decoration: none;">Visit Your Group</a></span> <ul style=3D"list-style-type: none; margin: 0; padding: 0; display: in= line;"> </ul> </div> <div id=3D"ft" style=3D"font-family: Arial; font-size: 11px; margin-top: 5p= x; padding: 0 2px 0 0; clear: both;"> <a href=3D"https://groups.yahoo.com/neo;_ylc=3DX3oDMTJkMm1pdXVhBF9TAzk3ND= c2NTkwBGdycElkAzgxNjExNjIEZ3Jwc3BJZAMxNzA1MDA2NTU5BHNlYwNmdHIEc2xrA2dmcARzd= GltZQMxNjAyNzk1MDY0" style=3D"float: left;"><img src=3D"https://s.yimg.com/= ru/0.9.12/min/css/yahoo_en-US_f_pw_101x21.png" height=3D"21" width=3D"101" = alt=3D"Yahoo! Groups" style=3D"border: 0;"/></a> <div style=3D"color: #747575; float: right;"> • <a href=3D"https://i= nfo.yahoo.com/privacy/us/yahoo/groups/details.html" style=3D"text-decoratio= n: none;">Privacy</a> • <a href=3D"mailto:turnkey-mvs-unsubscribe@yaho= ogroups.com?subject=3DUnsubscribe" style=3D"text-decoration: none;">Unsubsc= ribe</a> • <a href=3D"https://info.yahoo.com/legal/us/yahoo/utos/terms= /" style=3D"text-decoration: none;">Terms of Use</a> </div> </div> <br> <!-- |**|end egp html banner|**| --> </div> <!-- ygrp-msg --> =20 <!-- Sponsor --> <!-- |**|begin egp html banner|**| --> <div id=3D"ygrp-sponsor" style=3D"width:160px; float:right; clear:none; m= argin:0 0 25px 0; background: #fff;"> <!-- Start Recommendations --> <div id=3D"ygrp-reco"> </div> <!-- End Recommendations --> </div> <!-- |**|end egp html banner|**| --> <div style=3D"clear:both; color: #FFF; font-size:1px;">.</div> </div> <img src=3D"http://geo.yahoo.com/serv?s=3D97359714/grpId=3D8161162/grpspI= d=3D1705006559/msgId=3D11429/stime=3D1602795064" width=3D"1" height=3D"1"> = <br> <img src=3D"http://y.analytics.yahoo.com/fpc.pl?ywarid=3D515FB27823A7407E&a= =3D10001310322279&js=3Dno&resp=3Dimg" width=3D"1" height=3D"1">=20 <div style=3D"color: #fff; height: 0;">__,_._,___</div> <!--~-|**|PrettyHtmlEnd|**|-~--> </body> <!--~-|**|PrettyHtmlStart|**|-~--> <head> <style type=3D"text/css"> <!-- #ygrp-mkp { border: 1px solid #d8d8d8; font-family: Arial; margin: 10px 0; padding: 0 10px; } #ygrp-mkp hr { border: 1px solid #d8d8d8; } #ygrp-mkp #hd { color: #628c2a; font-size: 85%; font-weight: 700; line-height: 122%; margin: 10px 0; } #ygrp-mkp #ads { margin-bottom: 10px; } #ygrp-mkp .ad { padding: 0 0; } #ygrp-mkp .ad p { margin: 0; } #ygrp-mkp .ad a { color: #0000ff; text-decoration: none; } #ygrp-sponsor #ygrp-lc { font-family: Arial; } #ygrp-sponsor #ygrp-lc #hd { margin: 10px 0px; font-weight: 700; font-size: 78%; line-height: 122%; } #ygrp-sponsor #ygrp-lc .ad { margin-bottom: 10px; padding: 0 0; } #actions { font-family: Verdana; font-size: 11px; padding: 10px 0; } #activity { background-color: #e0ecee; float: left; font-family: Verdana; font-size: 10px; padding: 10px; } #activity span { font-weight: 700; } #activity span:first-child { text-transform: uppercase; } #activity span a { color: #5085b6; text-decoration: none; } #activity span span { color: #ff7900; } #activity span .underline { text-decoration: underline; } .attach { clear: both; display: table; font-family: Arial; font-size: 12px; padding: 10px 0; width: 400px; } .attach div a { text-decoration: none; } .attach img { border: none; padding-right: 5px; } .attach label { display: block; margin-bottom: 5px; } .attach label a { text-decoration: none; } =20=20 blockquote { margin: 0 0 0 4px; } .bold { font-family: Arial; font-size: 13px; font-weight: 700; } .bold a { text-decoration: none; } dd.last p a { font-family: Verdana; font-weight: 700; } dd.last p span { margin-right: 10px; font-family: Verdana; font-weight: 700; } dd.last p span.yshortcuts { margin-right: 0; } div.attach-table div div a { text-decoration: none; } div.attach-table { width: 400px; } div.file-title a, div.file-title a:active, div.file-title a:hover, div.fi= le-title a:visited { text-decoration: none; } div.photo-title a, div.photo-title a:active, div.photo-title a:hover, div= ..photo-title a:visited { text-decoration: none; } div#ygrp-mlmsg #ygrp-msg p a span.yshortcuts { font-family: Verdana; font-size: 10px; font-weight: normal; } .green { color: #628c2a; } .MsoNormal { margin: 0 0 0 0; } o { font-size: 0; } #photos div { float: left; width: 72px; } #photos div div { border: 1px solid #666666; height: 62px; overflow: hidden; width: 62px; } #photos div label { color: #666666; font-size: 10px; overflow: hidden; text-align: center; white-space: nowrap; width: 64px; } #reco-category { font-size: 77%; } #reco-desc { font-size: 77%; } .replbq { margin: 4px; } #ygrp-actbar div a:first-child { /* border-right: 0px solid #000;*/ margin-right: 2px; padding-right: 5px; } #ygrp-mlmsg { font-size: 13px; font-family: Arial, helvetica,clean, sans-serif; *font-size: small; *font: x-small; } #ygrp-mlmsg table { font-size: inherit; font: 100%; } #ygrp-mlmsg select, input, textarea { font: 99% Arial, Helvetica, clean, sans-serif; } #ygrp-mlmsg pre, code { font:115% monospace; *font-size:100%; } #ygrp-mlmsg * { line-height: 1.22em; } #ygrp-mlmsg #logo { padding-bottom: 10px; } #ygrp-msg p a { font-family: Verdana; } #ygrp-msg p#attach-count span { color: #1E66AE; font-weight: 700; } #ygrp-reco #reco-head { color: #ff7900; font-weight: 700; } #ygrp-reco { margin-bottom: 20px; padding: 0px; } #ygrp-sponsor #ov li a { font-size: 130%; text-decoration: none; } #ygrp-sponsor #ov li { font-size: 77%; list-style-type: square; padding: 6px 0; }=20 #ygrp-sponsor #ov ul { margin: 0; padding: 0 0 0 8px; } #ygrp-text { font-family: Georgia; } #ygrp-text p { margin: 0 0 1em 0; } #ygrp-text tt { font-size: 120%; } #ygrp-vital ul li:last-child { border-right: none !important;=20 }=20 --> </style> </head> <!--~-|**|PrettyHtmlEnd|**|-~--> </html> <!-- end group email --> ------=_NextPart_001_00DC_01D6A345.A733A960-- ------=_NextPart_000_00DB_01D6A345.A7338250 Content-Type: text/plain; name="scan_201014-150631.txt" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="scan_201014-150631.txt" //5F ------=_NextPart_000_00DB_01D6A345.A7338250--