[Dshield] popups to UDP:1026

John Sage jsage at finchhaven.com
Mon Aug 18 14:25:35 GMT 2003


Doesn't take 'em long, does it :-/


input: snort.log.1061144222
filter: ip and ( dst host 12.82.158.246 and dst port 1026 )
#
U 2003/08/17 11:27:05.118809 210.5.22.10:32797 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    ac f5 cc 24 f7 08 14 c6    ....O......$....
  6f 93 15 ea c6 30 ba f2    00 00 00 00 01 00 00 00    o....0..........
  00 00 00 00 00 00 ff ff    ff ff a7 01 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 41 4c 45 52    ............ALER
  54 20 53 45 52 56 49 43    45 00 00 00 0e 00 00 00    T SERVICE.......
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    63 01 00 00 00 00 00 00     USER...c.......
  63 01 00 00 20 20 20 20    20 20 20 20 20 54 4f 20    c...         TO 
  53 54 4f 50 20 4d 45 53    53 45 4e 47 45 52 20 50    STOP MESSENGER P
  4f 50 55 50 53 20 52 45    41 44 20 42 45 4c 4f 57    OPUPS READ BELOW
  0a 0a 59 6f 75 20 63 61    6e 20 53 54 4f 50 20 74    ..You can STOP t
  68 65 73 65 20 74 79 70    65 20 6f 66 20 50 4f 50    hese type of POP
  55 50 53 20 61 6e 64 20    61 64 76 65 72 74 69 73    UPS and advertis
  65 6d 65 6e 74 73 20 69    6e 20 6d 69 6e 75 74 65    ements in minute
  73 0a 62 79 20 67 6f 69    6e 67 20 74 6f 20 77 77    s.by going to ww
  77 2e 45 4e 44 41 44 53    2e 63 6f 6d 20 6e 6f 77    w.ENDADS.com now
  21 0a 0a 47 6f 20 74 6f    20 77 77 77 2e 45 4e 44    !..Go to www.END
  41 44 53 2e 63 6f 6d 20    6e 6f 77 20 74 6f 20 67    ADS.com now to g
  65 74 20 79 6f 75 72 20    73 6f 66 74 77 61 72 65    et your software
  20 69 6e 20 6d 69 6e 75    74 65 73 0a 61 6e 64 20     in minutes.and 
  74 6f 20 70 72 6f 74 65    63 74 20 79 6f 75 72 73    to protect yours
  65 6c 66 20 69 6e 20 6f    6e 65 20 65 61 73 79 20    elf in one easy 
  63 6c 69 63 6b 2e 0a 0a    50 72 65 73 73 69 6e 67    click...Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
#
U 2003/08/17 12:09:55.801013 210.5.22.10:32797 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    7c 56 0f ab a9 a8 3a 58    ....O...|V....:X
  6f 8e 19 57 b2 54 3f a8    00 00 00 00 01 00 00 00    o..W.T?.........
  00 00 00 00 00 00 ff ff    ff ff b7 01 00 00 00 00    ................
  0d 00 00 00 00 00 00 00    0d 00 00 00 53 59 53 54    ............SYST
  45 4d 20 41 4c 45 52 54    00 00 00 00 0e 00 00 00    EM ALERT........
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    73 01 00 00 00 00 00 00     USER...s.......
  73 01 00 00 0a 20 20 20    20 20 20 20 20 20 20 20    s....           
  20 20 20 20 2a 2a 2a 53    45 43 55 52 49 54 59 20        ***SECURITY 
  57 41 52 4e 49 4e 47 2a    2a 2a 0a 0a 54 68 65 20    WARNING***..The 
  72 65 63 65 69 70 74 20    6f 66 20 74 68 69 73 20    receipt of this 
  6d 65 73 73 61 67 65 20    63 6f 6e 66 69 72 6d 73    message confirms
  20 61 20 70 6f 73 73 69    62 6c 65 20 2a 53 65 63     a possible *Sec
  75 72 69 74 79 20 52 69    73 6b 2a 20 6f 6e 20 79    urity Risk* on y
  6f 75 72 0a 63 6f 6d 70    75 74 65 72 2e 20 20 59    our.computer.  Y
  6f 75 72 20 4d 65 73 73    65 6e 67 65 72 20 53 65    our Messenger Se
  72 76 69 63 65 20 69 73    20 6f 70 65 6e 20 74 6f    rvice is open to
  20 49 6e 74 65 72 6e 65    74 20 41 74 74 61 63 6b     Internet Attack
  65 72 73 21 0a 0a 54 6f    20 73 74 6f 70 20 74 68    ers!..To stop th
  65 73 65 20 4d 65 73 73    65 6e 67 65 72 20 50 6f    ese Messenger Po
  70 55 70 73 20 61 6e 64    20 70 72 6f 74 65 63 74    pUps and protect
  20 79 6f 75 72 73 65 6c    66 20 70 6c 65 61 73 65     yourself please
  20 67 6f 20 74 6f 20 0a    77 77 77 2e 45 4e 44 41     go to .www.ENDA
  44 53 2e 63 6f 6d 0a 0a    50 72 65 73 73 69 6e 67    DS.com..Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
#
U 2003/08/17 12:43:19.735395 210.5.22.10:32797 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    50 8c c1 02 84 30 d8 00    ....O...P....0..
  d6 f4 8a f8 f9 b0 d0 03    00 00 00 00 01 00 00 00    ................
  00 00 00 00 00 00 ff ff    ff ff ea 00 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 55 52 47 45    ............URGE
  4e 54 20 4e 4f 54 49 43    45 00 00 00 04 00 00 00    NT NOTICE.......
  00 00 00 00 04 00 00 00    59 4f 55 00 b2 00 00 00    ........YOU.....
  00 00 00 00 b2 00 00 00    0a 44 69 64 20 79 6f 75    .........Did you
  20 6b 6e 6f 77 20 74 68    65 72 65 20 69 73 20 61     know there is a
  20 65 61 73 79 20 6f 6e    65 2d 63 6c 69 63 6b 20     easy one-click 
  77 61 79 20 74 6f 20 73    74 6f 70 20 74 68 69 73    way to stop this
  20 74 79 70 65 20 6f 66    20 50 6f 70 2d 55 50 20     type of Pop-UP 
  66 6f 72 65 76 65 72 3f    0a 0a 46 6f 72 20 66 72    forever?..For fr
  65 65 20 69 6e 66 6f 72    6d 61 74 69 6f 6e 20 70    ee information p
  6c 65 61 73 65 20 76 69    73 69 74 20 68 74 74 70    lease visit http
  3a 2f 2f 77 77 77 2e 65    6e 64 61 64 73 2e 63 6f    ://www.endads.co
  6d 0a 0a 20 20 20 20 20    20 20 20 20 20 20 20 20    m..             
  20 20 20 20 20 20 20 20    20 20 20 77 77 77 2e 45               www.E
  4e 44 41 44 53 2e 63 6f    6d 00                      NDADS.com.      
#
U 2003/08/17 14:36:43.869419 210.5.22.10:32797 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    c9 53 03 d2 fe 43 d8 a6    ....O....S...C..
  5a 05 d5 93 4f 6f be 21    00 00 00 00 01 00 00 00    Z...Oo.!........
  00 00 00 00 00 00 ff ff    ff ff ea 00 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 55 52 47 45    ............URGE
  4e 54 20 4e 4f 54 49 43    45 00 00 00 04 00 00 00    NT NOTICE.......
  00 00 00 00 04 00 00 00    59 4f 55 00 b2 00 00 00    ........YOU.....
  00 00 00 00 b2 00 00 00    0a 44 69 64 20 79 6f 75    .........Did you
  20 6b 6e 6f 77 20 74 68    65 72 65 20 69 73 20 61     know there is a
  20 65 61 73 79 20 6f 6e    65 2d 63 6c 69 63 6b 20     easy one-click 
  77 61 79 20 74 6f 20 73    74 6f 70 20 74 68 69 73    way to stop this
  20 74 79 70 65 20 6f 66    20 50 6f 70 2d 55 50 20     type of Pop-UP 
  66 6f 72 65 76 65 72 3f    0a 0a 46 6f 72 20 66 72    forever?..For fr
  65 65 20 69 6e 66 6f 72    6d 61 74 69 6f 6e 20 70    ee information p
  6c 65 61 73 65 20 76 69    73 69 74 20 68 74 74 70    lease visit http
  3a 2f 2f 77 77 77 2e 65    6e 64 61 64 73 2e 63 6f    ://www.endads.co
  6d 0a 0a 20 20 20 20 20    20 20 20 20 20 20 20 20    m..             
  20 20 20 20 20 20 20 20    20 20 20 77 77 77 2e 45               www.E
  4e 44 41 44 53 2e 63 6f    6d 00                      NDADS.com.      
#
U 2003/08/17 15:14:13.448895 210.5.22.10:32797 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    59 ca 44 c2 ff bf 9e bb    ....O...Y.D.....
  70 42 b1 89 18 37 f0 fa    00 00 00 00 01 00 00 00    pB...7..........
  00 00 00 00 00 00 ff ff    ff ff a7 01 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 41 4c 45 52    ............ALER
  54 20 53 45 52 56 49 43    45 00 00 00 0e 00 00 00    T SERVICE.......
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    63 01 00 00 00 00 00 00     USER...c.......
  63 01 00 00 20 20 20 20    20 20 20 20 20 54 4f 20    c...         TO 
  53 54 4f 50 20 4d 45 53    53 45 4e 47 45 52 20 50    STOP MESSENGER P
  4f 50 55 50 53 20 52 45    41 44 20 42 45 4c 4f 57    OPUPS READ BELOW
  0a 0a 59 6f 75 20 63 61    6e 20 53 54 4f 50 20 74    ..You can STOP t
  68 65 73 65 20 74 79 70    65 20 6f 66 20 50 4f 50    hese type of POP
  55 50 53 20 61 6e 64 20    61 64 76 65 72 74 69 73    UPS and advertis
  65 6d 65 6e 74 73 20 69    6e 20 6d 69 6e 75 74 65    ements in minute
  73 0a 62 79 20 67 6f 69    6e 67 20 74 6f 20 77 77    s.by going to ww
  77 2e 45 4e 44 41 44 53    2e 63 6f 6d 20 6e 6f 77    w.ENDADS.com now
  21 0a 0a 47 6f 20 74 6f    20 77 77 77 2e 45 4e 44    !..Go to www.END
  41 44 53 2e 63 6f 6d 20    6e 6f 77 20 74 6f 20 67    ADS.com now to g
  65 74 20 79 6f 75 72 20    73 6f 66 74 77 61 72 65    et your software
  20 69 6e 20 6d 69 6e 75    74 65 73 0a 61 6e 64 20     in minutes.and 
  74 6f 20 70 72 6f 74 65    63 74 20 79 6f 75 72 73    to protect yours
  65 6c 66 20 69 6e 20 6f    6e 65 20 65 61 73 79 20    elf in one easy 
  63 6c 69 63 6b 2e 0a 0a    50 72 65 73 73 69 6e 67    click...Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
#
U 2003/08/17 15:56:33.828017 210.5.22.10:32797 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    bd 00 0e cb ff 47 ff 39    ....O........G.9
  54 7c 2b 27 f5 68 7d 2f    00 00 00 00 01 00 00 00    T|+'.h}/........
  00 00 00 00 00 00 ff ff    ff ff b7 01 00 00 00 00    ................
  0d 00 00 00 00 00 00 00    0d 00 00 00 53 59 53 54    ............SYST
  45 4d 20 41 4c 45 52 54    00 00 00 00 0e 00 00 00    EM ALERT........
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    73 01 00 00 00 00 00 00     USER...s.......
  73 01 00 00 0a 20 20 20    20 20 20 20 20 20 20 20    s....           
  20 20 20 20 2a 2a 2a 53    45 43 55 52 49 54 59 20        ***SECURITY 
  57 41 52 4e 49 4e 47 2a    2a 2a 0a 0a 54 68 65 20    WARNING***..The 
  72 65 63 65 69 70 74 20    6f 66 20 74 68 69 73 20    receipt of this 
  6d 65 73 73 61 67 65 20    63 6f 6e 66 69 72 6d 73    message confirms
  20 61 20 70 6f 73 73 69    62 6c 65 20 2a 53 65 63     a possible *Sec
  75 72 69 74 79 20 52 69    73 6b 2a 20 6f 6e 20 79    urity Risk* on y
  6f 75 72 0a 63 6f 6d 70    75 74 65 72 2e 20 20 59    our.computer.  Y
  6f 75 72 20 4d 65 73 73    65 6e 67 65 72 20 53 65    our Messenger Se
  72 76 69 63 65 20 69 73    20 6f 70 65 6e 20 74 6f    rvice is open to
  20 49 6e 74 65 72 6e 65    74 20 41 74 74 61 63 6b     Internet Attack
  65 72 73 21 0a 0a 54 6f    20 73 74 6f 70 20 74 68    ers!..To stop th
  65 73 65 20 4d 65 73 73    65 6e 67 65 72 20 50 6f    ese Messenger Po
  70 55 70 73 20 61 6e 64    20 70 72 6f 74 65 63 74    pUps and protect
  20 79 6f 75 72 73 65 6c    66 20 70 6c 65 61 73 65     yourself please
  20 67 6f 20 74 6f 20 0a    77 77 77 2e 45 4e 44 41     go to .www.ENDA
  44 53 2e 63 6f 6d 0a 0a    50 72 65 73 73 69 6e 67    DS.com..Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
#
U 2003/08/17 16:30:13.283995 210.5.22.10:32797 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    9b 2c 4a 56 be fe 31 c8    ....O....,JV..1.
  71 d6 46 13 4c 13 07 4f    00 00 00 00 01 00 00 00    q.F.L..O........
  00 00 00 00 00 00 ff ff    ff ff ea 00 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 55 52 47 45    ............URGE
  4e 54 20 4e 4f 54 49 43    45 00 00 00 04 00 00 00    NT NOTICE.......
  00 00 00 00 04 00 00 00    59 4f 55 00 b2 00 00 00    ........YOU.....
  00 00 00 00 b2 00 00 00    0a 44 69 64 20 79 6f 75    .........Did you
  20 6b 6e 6f 77 20 74 68    65 72 65 20 69 73 20 61     know there is a
  20 65 61 73 79 20 6f 6e    65 2d 63 6c 69 63 6b 20     easy one-click 
  77 61 79 20 74 6f 20 73    74 6f 70 20 74 68 69 73    way to stop this
  20 74 79 70 65 20 6f 66    20 50 6f 70 2d 55 50 20     type of Pop-UP 
  66 6f 72 65 76 65 72 3f    0a 0a 46 6f 72 20 66 72    forever?..For fr
  65 65 20 69 6e 66 6f 72    6d 61 74 69 6f 6e 20 70    ee information p
  6c 65 61 73 65 20 76 69    73 69 74 20 68 74 74 70    lease visit http
  3a 2f 2f 77 77 77 2e 65    6e 64 61 64 73 2e 63 6f    ://www.endads.co
  6d 0a 0a 20 20 20 20 20    20 20 20 20 20 20 20 20    m..             
  20 20 20 20 20 20 20 20    20 20 20 77 77 77 2e 45               www.E
  4e 44 41 44 53 2e 63 6f    6d 00                      NDADS.com.      
#
U 2003/08/17 17:07:45.093679 210.5.22.10:32797 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    90 db a9 7c 87 02 62 3e    ....O......|..b>
  ef 74 d6 cc b4 f3 b7 c7    00 00 00 00 01 00 00 00    .t..............
  00 00 00 00 00 00 ff ff    ff ff a7 01 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 41 4c 45 52    ............ALER
  54 20 53 45 52 56 49 43    45 00 00 00 0e 00 00 00    T SERVICE.......
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    63 01 00 00 00 00 00 00     USER...c.......
  63 01 00 00 20 20 20 20    20 20 20 20 20 54 4f 20    c...         TO 
  53 54 4f 50 20 4d 45 53    53 45 4e 47 45 52 20 50    STOP MESSENGER P
  4f 50 55 50 53 20 52 45    41 44 20 42 45 4c 4f 57    OPUPS READ BELOW
  0a 0a 59 6f 75 20 63 61    6e 20 53 54 4f 50 20 74    ..You can STOP t
  68 65 73 65 20 74 79 70    65 20 6f 66 20 50 4f 50    hese type of POP
  55 50 53 20 61 6e 64 20    61 64 76 65 72 74 69 73    UPS and advertis
  65 6d 65 6e 74 73 20 69    6e 20 6d 69 6e 75 74 65    ements in minute
  73 0a 62 79 20 67 6f 69    6e 67 20 74 6f 20 77 77    s.by going to ww
  77 2e 45 4e 44 41 44 53    2e 63 6f 6d 20 6e 6f 77    w.ENDADS.com now
  21 0a 0a 47 6f 20 74 6f    20 77 77 77 2e 45 4e 44    !..Go to www.END
  41 44 53 2e 63 6f 6d 20    6e 6f 77 20 74 6f 20 67    ADS.com now to g
  65 74 20 79 6f 75 72 20    73 6f 66 74 77 61 72 65    et your software
  20 69 6e 20 6d 69 6e 75    74 65 73 0a 61 6e 64 20     in minutes.and 
  74 6f 20 70 72 6f 74 65    63 74 20 79 6f 75 72 73    to protect yours
  65 6c 66 20 69 6e 20 6f    6e 65 20 65 61 73 79 20    elf in one easy 
  63 6c 69 63 6b 2e 0a 0a    50 72 65 73 73 69 6e 67    click...Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
#
U 2003/08/17 18:00:50.188565 64.174.34.21:32798 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    9c d1 42 da 85 33 21 a8    ....O.....B..3!.
  e0 64 c0 9b 2f 8e a2 46    00 00 00 00 01 00 00 00    .d../..F........
  00 00 00 00 00 00 ff ff    ff ff b7 01 00 00 00 00    ................
  0d 00 00 00 00 00 00 00    0d 00 00 00 53 59 53 54    ............SYST
  45 4d 20 41 4c 45 52 54    00 00 00 00 0e 00 00 00    EM ALERT........
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    73 01 00 00 00 00 00 00     USER...s.......
  73 01 00 00 0a 20 20 20    20 20 20 20 20 20 20 20    s....           
  20 20 20 20 2a 2a 2a 53    45 43 55 52 49 54 59 20        ***SECURITY 
  57 41 52 4e 49 4e 47 2a    2a 2a 0a 0a 54 68 65 20    WARNING***..The 
  72 65 63 65 69 70 74 20    6f 66 20 74 68 69 73 20    receipt of this 
  6d 65 73 73 61 67 65 20    63 6f 6e 66 69 72 6d 73    message confirms
  20 61 20 70 6f 73 73 69    62 6c 65 20 2a 53 65 63     a possible *Sec
  75 72 69 74 79 20 52 69    73 6b 2a 20 6f 6e 20 79    urity Risk* on y
  6f 75 72 0a 63 6f 6d 70    75 74 65 72 2e 20 20 59    our.computer.  Y
  6f 75 72 20 4d 65 73 73    65 6e 67 65 72 20 53 65    our Messenger Se
  72 76 69 63 65 20 69 73    20 6f 70 65 6e 20 74 6f    rvice is open to
  20 49 6e 74 65 72 6e 65    74 20 41 74 74 61 63 6b     Internet Attack
  65 72 73 21 0a 0a 54 6f    20 73 74 6f 70 20 74 68    ers!..To stop th
  65 73 65 20 4d 65 73 73    65 6e 67 65 72 20 50 6f    ese Messenger Po
  70 55 70 73 20 61 6e 64    20 70 72 6f 74 65 63 74    pUps and protect
  20 79 6f 75 72 73 65 6c    66 20 70 6c 65 61 73 65     yourself please
  20 67 6f 20 74 6f 20 0a    77 77 77 2e 45 4e 44 41     go to .www.ENDA
  44 53 2e 63 6f 6d 0a 0a    50 72 65 73 73 69 6e 67    DS.com..Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
#
U 2003/08/17 18:34:17.483292 64.174.34.21:32798 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    84 5f ad 4a c4 b2 f1 ab    ....O...._.J....
  9b a6 fc 8f 16 49 af bc    00 00 00 00 01 00 00 00    .....I..........
  00 00 00 00 00 00 ff ff    ff ff ea 00 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 55 52 47 45    ............URGE
  4e 54 20 4e 4f 54 49 43    45 00 00 00 04 00 00 00    NT NOTICE.......
  00 00 00 00 04 00 00 00    59 4f 55 00 b2 00 00 00    ........YOU.....
  00 00 00 00 b2 00 00 00    0a 44 69 64 20 79 6f 75    .........Did you
  20 6b 6e 6f 77 20 74 68    65 72 65 20 69 73 20 61     know there is a
  20 65 61 73 79 20 6f 6e    65 2d 63 6c 69 63 6b 20     easy one-click 
  77 61 79 20 74 6f 20 73    74 6f 70 20 74 68 69 73    way to stop this
  20 74 79 70 65 20 6f 66    20 50 6f 70 2d 55 50 20     type of Pop-UP 
  66 6f 72 65 76 65 72 3f    0a 0a 46 6f 72 20 66 72    forever?..For fr
  65 65 20 69 6e 66 6f 72    6d 61 74 69 6f 6e 20 70    ee information p
  6c 65 61 73 65 20 76 69    73 69 74 20 68 74 74 70    lease visit http
  3a 2f 2f 77 77 77 2e 65    6e 64 61 64 73 2e 63 6f    ://www.endads.co
  6d 0a 0a 20 20 20 20 20    20 20 20 20 20 20 20 20    m..             
  20 20 20 20 20 20 20 20    20 20 20 77 77 77 2e 45               www.E
  4e 44 41 44 53 2e 63 6f    6d 00                      NDADS.com.      
#
U 2003/08/17 19:11:43.812435 64.174.34.21:32798 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    e7 01 28 b4 f5 f8 d7 9b    ....O.....(.....
  cc 94 6f 41 d3 29 f5 6e    00 00 00 00 01 00 00 00    ..oA.).n........
  00 00 00 00 00 00 ff ff    ff ff a7 01 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 41 4c 45 52    ............ALER
  54 20 53 45 52 56 49 43    45 00 00 00 0e 00 00 00    T SERVICE.......
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    63 01 00 00 00 00 00 00     USER...c.......
  63 01 00 00 20 20 20 20    20 20 20 20 20 54 4f 20    c...         TO 
  53 54 4f 50 20 4d 45 53    53 45 4e 47 45 52 20 50    STOP MESSENGER P
  4f 50 55 50 53 20 52 45    41 44 20 42 45 4c 4f 57    OPUPS READ BELOW
  0a 0a 59 6f 75 20 63 61    6e 20 53 54 4f 50 20 74    ..You can STOP t
  68 65 73 65 20 74 79 70    65 20 6f 66 20 50 4f 50    hese type of POP
  55 50 53 20 61 6e 64 20    61 64 76 65 72 74 69 73    UPS and advertis
  65 6d 65 6e 74 73 20 69    6e 20 6d 69 6e 75 74 65    ements in minute
  73 0a 62 79 20 67 6f 69    6e 67 20 74 6f 20 77 77    s.by going to ww
  77 2e 45 4e 44 41 44 53    2e 63 6f 6d 20 6e 6f 77    w.ENDADS.com now
  21 0a 0a 47 6f 20 74 6f    20 77 77 77 2e 45 4e 44    !..Go to www.END
  41 44 53 2e 63 6f 6d 20    6e 6f 77 20 74 6f 20 67    ADS.com now to g
  65 74 20 79 6f 75 72 20    73 6f 66 74 77 61 72 65    et your software
  20 69 6e 20 6d 69 6e 75    74 65 73 0a 61 6e 64 20     in minutes.and 
  74 6f 20 70 72 6f 74 65    63 74 20 79 6f 75 72 73    to protect yours
  65 6c 66 20 69 6e 20 6f    6e 65 20 65 61 73 79 20    elf in one easy 
  63 6c 69 63 6b 2e 0a 0a    50 72 65 73 73 69 6e 67    click...Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
#
U 2003/08/17 19:54:31.504332 64.174.34.21:32798 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    4b 57 e3 6b 20 2f 6f c0    ....O...KW.k /o.
  55 6e bd 8c 73 78 dd 2b    00 00 00 00 01 00 00 00    Un..sx.+........
  00 00 00 00 00 00 ff ff    ff ff b7 01 00 00 00 00    ................
  0d 00 00 00 00 00 00 00    0d 00 00 00 53 59 53 54    ............SYST
  45 4d 20 41 4c 45 52 54    00 00 00 00 0e 00 00 00    EM ALERT........
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    73 01 00 00 00 00 00 00     USER...s.......
  73 01 00 00 0a 20 20 20    20 20 20 20 20 20 20 20    s....           
  20 20 20 20 2a 2a 2a 53    45 43 55 52 49 54 59 20        ***SECURITY 
  57 41 52 4e 49 4e 47 2a    2a 2a 0a 0a 54 68 65 20    WARNING***..The 
  72 65 63 65 69 70 74 20    6f 66 20 74 68 69 73 20    receipt of this 
  6d 65 73 73 61 67 65 20    63 6f 6e 66 69 72 6d 73    message confirms
  20 61 20 70 6f 73 73 69    62 6c 65 20 2a 53 65 63     a possible *Sec
  75 72 69 74 79 20 52 69    73 6b 2a 20 6f 6e 20 79    urity Risk* on y
  6f 75 72 0a 63 6f 6d 70    75 74 65 72 2e 20 20 59    our.computer.  Y
  6f 75 72 20 4d 65 73 73    65 6e 67 65 72 20 53 65    our Messenger Se
  72 76 69 63 65 20 69 73    20 6f 70 65 6e 20 74 6f    rvice is open to
  20 49 6e 74 65 72 6e 65    74 20 41 74 74 61 63 6b     Internet Attack
  65 72 73 21 0a 0a 54 6f    20 73 74 6f 70 20 74 68    ers!..To stop th
  65 73 65 20 4d 65 73 73    65 6e 67 65 72 20 50 6f    ese Messenger Po
  70 55 70 73 20 61 6e 64    20 70 72 6f 74 65 63 74    pUps and protect
  20 79 6f 75 72 73 65 6c    66 20 70 6c 65 61 73 65     yourself please
  20 67 6f 20 74 6f 20 0a    77 77 77 2e 45 4e 44 41     go to .www.ENDA
  44 53 2e 63 6f 6d 0a 0a    50 72 65 73 73 69 6e 67    DS.com..Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
#
U 2003/08/17 20:28:03.449535 64.174.34.21:32798 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    b7 2a e8 1d 1e 7d bd 86    ....O....*...}..
  65 52 2d 42 40 bd 5e e4    00 00 00 00 01 00 00 00    eR-B at .^.........
  00 00 00 00 00 00 ff ff    ff ff ea 00 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 55 52 47 45    ............URGE
  4e 54 20 4e 4f 54 49 43    45 00 00 00 04 00 00 00    NT NOTICE.......
  00 00 00 00 04 00 00 00    59 4f 55 00 b2 00 00 00    ........YOU.....
  00 00 00 00 b2 00 00 00    0a 44 69 64 20 79 6f 75    .........Did you
  20 6b 6e 6f 77 20 74 68    65 72 65 20 69 73 20 61     know there is a
  20 65 61 73 79 20 6f 6e    65 2d 63 6c 69 63 6b 20     easy one-click 
  77 61 79 20 74 6f 20 73    74 6f 70 20 74 68 69 73    way to stop this
  20 74 79 70 65 20 6f 66    20 50 6f 70 2d 55 50 20     type of Pop-UP 
  66 6f 72 65 76 65 72 3f    0a 0a 46 6f 72 20 66 72    forever?..For fr
  65 65 20 69 6e 66 6f 72    6d 61 74 69 6f 6e 20 70    ee information p
  6c 65 61 73 65 20 76 69    73 69 74 20 68 74 74 70    lease visit http
  3a 2f 2f 77 77 77 2e 65    6e 64 61 64 73 2e 63 6f    ://www.endads.co
  6d 0a 0a 20 20 20 20 20    20 20 20 20 20 20 20 20    m..             
  20 20 20 20 20 20 20 20    20 20 20 77 77 77 2e 45               www.E
  4e 44 41 44 53 2e 63 6f    6d 00                      NDADS.com.      
#
U 2003/08/17 21:05:28.278523 64.174.34.21:32798 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    24 07 f0 e2 32 f5 d7 05    ....O...$...2...
  f7 a1 b6 88 23 26 9c 81    00 00 00 00 01 00 00 00    ....#&..........
  00 00 00 00 00 00 ff ff    ff ff a7 01 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 41 4c 45 52    ............ALER
  54 20 53 45 52 56 49 43    45 00 00 00 0e 00 00 00    T SERVICE.......
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    63 01 00 00 00 00 00 00     USER...c.......
  63 01 00 00 20 20 20 20    20 20 20 20 20 54 4f 20    c...         TO 
  53 54 4f 50 20 4d 45 53    53 45 4e 47 45 52 20 50    STOP MESSENGER P
  4f 50 55 50 53 20 52 45    41 44 20 42 45 4c 4f 57    OPUPS READ BELOW
  0a 0a 59 6f 75 20 63 61    6e 20 53 54 4f 50 20 74    ..You can STOP t
  68 65 73 65 20 74 79 70    65 20 6f 66 20 50 4f 50    hese type of POP
  55 50 53 20 61 6e 64 20    61 64 76 65 72 74 69 73    UPS and advertis
  65 6d 65 6e 74 73 20 69    6e 20 6d 69 6e 75 74 65    ements in minute
  73 0a 62 79 20 67 6f 69    6e 67 20 74 6f 20 77 77    s.by going to ww
  77 2e 45 4e 44 41 44 53    2e 63 6f 6d 20 6e 6f 77    w.ENDADS.com now
  21 0a 0a 47 6f 20 74 6f    20 77 77 77 2e 45 4e 44    !..Go to www.END
  41 44 53 2e 63 6f 6d 20    6e 6f 77 20 74 6f 20 67    ADS.com now to g
  65 74 20 79 6f 75 72 20    73 6f 66 74 77 61 72 65    et your software
  20 69 6e 20 6d 69 6e 75    74 65 73 0a 61 6e 64 20     in minutes.and 
  74 6f 20 70 72 6f 74 65    63 74 20 79 6f 75 72 73    to protect yours
  65 6c 66 20 69 6e 20 6f    6e 65 20 65 61 73 79 20    elf in one easy 
  63 6c 69 63 6b 2e 0a 0a    50 72 65 73 73 69 6e 67    click...Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
#
U 2003/08/17 21:48:05.479360 64.174.34.21:32798 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    49 4b ca 62 15 ed 60 c5    ....O...IK.b..`.
  41 2e 42 bd 63 c6 21 d4    00 00 00 00 01 00 00 00    A.B.c.!.........
  00 00 00 00 00 00 ff ff    ff ff b7 01 00 00 00 00    ................
  0d 00 00 00 00 00 00 00    0d 00 00 00 53 59 53 54    ............SYST
  45 4d 20 41 4c 45 52 54    00 00 00 00 0e 00 00 00    EM ALERT........
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    73 01 00 00 00 00 00 00     USER...s.......
  73 01 00 00 0a 20 20 20    20 20 20 20 20 20 20 20    s....           
  20 20 20 20 2a 2a 2a 53    45 43 55 52 49 54 59 20        ***SECURITY 
  57 41 52 4e 49 4e 47 2a    2a 2a 0a 0a 54 68 65 20    WARNING***..The 
  72 65 63 65 69 70 74 20    6f 66 20 74 68 69 73 20    receipt of this 
  6d 65 73 73 61 67 65 20    63 6f 6e 66 69 72 6d 73    message confirms
  20 61 20 70 6f 73 73 69    62 6c 65 20 2a 53 65 63     a possible *Sec
  75 72 69 74 79 20 52 69    73 6b 2a 20 6f 6e 20 79    urity Risk* on y
  6f 75 72 0a 63 6f 6d 70    75 74 65 72 2e 20 20 59    our.computer.  Y
  6f 75 72 20 4d 65 73 73    65 6e 67 65 72 20 53 65    our Messenger Se
  72 76 69 63 65 20 69 73    20 6f 70 65 6e 20 74 6f    rvice is open to
  20 49 6e 74 65 72 6e 65    74 20 41 74 74 61 63 6b     Internet Attack
  65 72 73 21 0a 0a 54 6f    20 73 74 6f 70 20 74 68    ers!..To stop th
  65 73 65 20 4d 65 73 73    65 6e 67 65 72 20 50 6f    ese Messenger Po
  70 55 70 73 20 61 6e 64    20 70 72 6f 74 65 63 74    pUps and protect
  20 79 6f 75 72 73 65 6c    66 20 70 6c 65 61 73 65     yourself please
  20 67 6f 20 74 6f 20 0a    77 77 77 2e 45 4e 44 41     go to .www.ENDA
  44 53 2e 63 6f 6d 0a 0a    50 72 65 73 73 69 6e 67    DS.com..Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
#
U 2003/08/17 22:21:29.743793 64.174.34.21:32798 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    06 22 c4 8f 1b 76 90 bf    ....O...."...v..
  7d 2e bf 26 73 e1 1e e0    00 00 00 00 01 00 00 00    }..&s...........
  00 00 00 00 00 00 ff ff    ff ff ea 00 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 55 52 47 45    ............URGE
  4e 54 20 4e 4f 54 49 43    45 00 00 00 04 00 00 00    NT NOTICE.......
  00 00 00 00 04 00 00 00    59 4f 55 00 b2 00 00 00    ........YOU.....
  00 00 00 00 b2 00 00 00    0a 44 69 64 20 79 6f 75    .........Did you
  20 6b 6e 6f 77 20 74 68    65 72 65 20 69 73 20 61     know there is a
  20 65 61 73 79 20 6f 6e    65 2d 63 6c 69 63 6b 20     easy one-click 
  77 61 79 20 74 6f 20 73    74 6f 70 20 74 68 69 73    way to stop this
  20 74 79 70 65 20 6f 66    20 50 6f 70 2d 55 50 20     type of Pop-UP 
  66 6f 72 65 76 65 72 3f    0a 0a 46 6f 72 20 66 72    forever?..For fr
  65 65 20 69 6e 66 6f 72    6d 61 74 69 6f 6e 20 70    ee information p
  6c 65 61 73 65 20 76 69    73 69 74 20 68 74 74 70    lease visit http
  3a 2f 2f 77 77 77 2e 65    6e 64 61 64 73 2e 63 6f    ://www.endads.co
  6d 0a 0a 20 20 20 20 20    20 20 20 20 20 20 20 20    m..             
  20 20 20 20 20 20 20 20    20 20 20 77 77 77 2e 45               www.E
  4e 44 41 44 53 2e 63 6f    6d 00                      NDADS.com.      
#
U 2003/08/17 22:59:01.423468 64.174.34.21:32798 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    22 18 06 be 78 91 81 d2    ....O..."...x...
  8a fd cd 34 9a 81 0b e4    00 00 00 00 01 00 00 00    ...4............
  00 00 00 00 00 00 ff ff    ff ff a7 01 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 41 4c 45 52    ............ALER
  54 20 53 45 52 56 49 43    45 00 00 00 0e 00 00 00    T SERVICE.......
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    63 01 00 00 00 00 00 00     USER...c.......
  63 01 00 00 20 20 20 20    20 20 20 20 20 54 4f 20    c...         TO 
  53 54 4f 50 20 4d 45 53    53 45 4e 47 45 52 20 50    STOP MESSENGER P
  4f 50 55 50 53 20 52 45    41 44 20 42 45 4c 4f 57    OPUPS READ BELOW
  0a 0a 59 6f 75 20 63 61    6e 20 53 54 4f 50 20 74    ..You can STOP t
  68 65 73 65 20 74 79 70    65 20 6f 66 20 50 4f 50    hese type of POP
  55 50 53 20 61 6e 64 20    61 64 76 65 72 74 69 73    UPS and advertis
  65 6d 65 6e 74 73 20 69    6e 20 6d 69 6e 75 74 65    ements in minute
  73 0a 62 79 20 67 6f 69    6e 67 20 74 6f 20 77 77    s.by going to ww
  77 2e 45 4e 44 41 44 53    2e 63 6f 6d 20 6e 6f 77    w.ENDADS.com now
  21 0a 0a 47 6f 20 74 6f    20 77 77 77 2e 45 4e 44    !..Go to www.END
  41 44 53 2e 63 6f 6d 20    6e 6f 77 20 74 6f 20 67    ADS.com now to g
  65 74 20 79 6f 75 72 20    73 6f 66 74 77 61 72 65    et your software
  20 69 6e 20 6d 69 6e 75    74 65 73 0a 61 6e 64 20     in minutes.and 
  74 6f 20 70 72 6f 74 65    63 74 20 79 6f 75 72 73    to protect yours
  65 6c 66 20 69 6e 20 6f    6e 65 20 65 61 73 79 20    elf in one easy 
  63 6c 69 63 6b 2e 0a 0a    50 72 65 73 73 69 6e 67    click...Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
#
U 2003/08/17 23:41:27.953212 64.174.34.21:32798 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    32 33 b1 db 53 16 aa ef    ....O...23..S...
  06 f2 a6 d7 59 2d 79 99    00 00 00 00 01 00 00 00    ....Y-y.........
  00 00 00 00 00 00 ff ff    ff ff b7 01 00 00 00 00    ................
  0d 00 00 00 00 00 00 00    0d 00 00 00 53 59 53 54    ............SYST
  45 4d 20 41 4c 45 52 54    00 00 00 00 0e 00 00 00    EM ALERT........
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    73 01 00 00 00 00 00 00     USER...s.......
  73 01 00 00 0a 20 20 20    20 20 20 20 20 20 20 20    s....           
  20 20 20 20 2a 2a 2a 53    45 43 55 52 49 54 59 20        ***SECURITY 
  57 41 52 4e 49 4e 47 2a    2a 2a 0a 0a 54 68 65 20    WARNING***..The 
  72 65 63 65 69 70 74 20    6f 66 20 74 68 69 73 20    receipt of this 
  6d 65 73 73 61 67 65 20    63 6f 6e 66 69 72 6d 73    message confirms
  20 61 20 70 6f 73 73 69    62 6c 65 20 2a 53 65 63     a possible *Sec
  75 72 69 74 79 20 52 69    73 6b 2a 20 6f 6e 20 79    urity Risk* on y
  6f 75 72 0a 63 6f 6d 70    75 74 65 72 2e 20 20 59    our.computer.  Y
  6f 75 72 20 4d 65 73 73    65 6e 67 65 72 20 53 65    our Messenger Se
  72 76 69 63 65 20 69 73    20 6f 70 65 6e 20 74 6f    rvice is open to
  20 49 6e 74 65 72 6e 65    74 20 41 74 74 61 63 6b     Internet Attack
  65 72 73 21 0a 0a 54 6f    20 73 74 6f 70 20 74 68    ers!..To stop th
  65 73 65 20 4d 65 73 73    65 6e 67 65 72 20 50 6f    ese Messenger Po
  70 55 70 73 20 61 6e 64    20 70 72 6f 74 65 63 74    pUps and protect
  20 79 6f 75 72 73 65 6c    66 20 70 6c 65 61 73 65     yourself please
  20 67 6f 20 74 6f 20 0a    77 77 77 2e 45 4e 44 41     go to .www.ENDA
  44 53 2e 63 6f 6d 0a 0a    50 72 65 73 73 69 6e 67    DS.com..Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
#
U 2003/08/18 00:15:02.638733 64.174.34.21:32798 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    ab ff 80 17 2b 74 01 da    ....O.......+t..
  7e 59 69 c9 c0 02 7c 36    00 00 00 00 01 00 00 00    ~Yi...|6........
  00 00 00 00 00 00 ff ff    ff ff ea 00 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 55 52 47 45    ............URGE
  4e 54 20 4e 4f 54 49 43    45 00 00 00 04 00 00 00    NT NOTICE.......
  00 00 00 00 04 00 00 00    59 4f 55 00 b2 00 00 00    ........YOU.....
  00 00 00 00 b2 00 00 00    0a 44 69 64 20 79 6f 75    .........Did you
  20 6b 6e 6f 77 20 74 68    65 72 65 20 69 73 20 61     know there is a
  20 65 61 73 79 20 6f 6e    65 2d 63 6c 69 63 6b 20     easy one-click 
  77 61 79 20 74 6f 20 73    74 6f 70 20 74 68 69 73    way to stop this
  20 74 79 70 65 20 6f 66    20 50 6f 70 2d 55 50 20     type of Pop-UP 
  66 6f 72 65 76 65 72 3f    0a 0a 46 6f 72 20 66 72    forever?..For fr
  65 65 20 69 6e 66 6f 72    6d 61 74 69 6f 6e 20 70    ee information p
  6c 65 61 73 65 20 76 69    73 69 74 20 68 74 74 70    lease visit http
  3a 2f 2f 77 77 77 2e 65    6e 64 61 64 73 2e 63 6f    ://www.endads.co
  6d 0a 0a 20 20 20 20 20    20 20 20 20 20 20 20 20    m..             
  20 20 20 20 20 20 20 20    20 20 20 77 77 77 2e 45               www.E
  4e 44 41 44 53 2e 63 6f    6d 00                      NDADS.com.      
#
U 2003/08/18 00:52:25.857520 64.174.34.21:32798 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    31 1a 4b b3 2b 22 ba 5d    ....O...1.K.+".]
  e6 fd 32 0f 9e 84 b4 13    00 00 00 00 01 00 00 00    ..2.............
  00 00 00 00 00 00 ff ff    ff ff a7 01 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 41 4c 45 52    ............ALER
  54 20 53 45 52 56 49 43    45 00 00 00 0e 00 00 00    T SERVICE.......
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    63 01 00 00 00 00 00 00     USER...c.......
  63 01 00 00 20 20 20 20    20 20 20 20 20 54 4f 20    c...         TO 
  53 54 4f 50 20 4d 45 53    53 45 4e 47 45 52 20 50    STOP MESSENGER P
  4f 50 55 50 53 20 52 45    41 44 20 42 45 4c 4f 57    OPUPS READ BELOW
  0a 0a 59 6f 75 20 63 61    6e 20 53 54 4f 50 20 74    ..You can STOP t
  68 65 73 65 20 74 79 70    65 20 6f 66 20 50 4f 50    hese type of POP
  55 50 53 20 61 6e 64 20    61 64 76 65 72 74 69 73    UPS and advertis
  65 6d 65 6e 74 73 20 69    6e 20 6d 69 6e 75 74 65    ements in minute
  73 0a 62 79 20 67 6f 69    6e 67 20 74 6f 20 77 77    s.by going to ww
  77 2e 45 4e 44 41 44 53    2e 63 6f 6d 20 6e 6f 77    w.ENDADS.com now
  21 0a 0a 47 6f 20 74 6f    20 77 77 77 2e 45 4e 44    !..Go to www.END
  41 44 53 2e 63 6f 6d 20    6e 6f 77 20 74 6f 20 67    ADS.com now to g
  65 74 20 79 6f 75 72 20    73 6f 66 74 77 61 72 65    et your software
  20 69 6e 20 6d 69 6e 75    74 65 73 0a 61 6e 64 20     in minutes.and 
  74 6f 20 70 72 6f 74 65    63 74 20 79 6f 75 72 73    to protect yours
  65 6c 66 20 69 6e 20 6f    6e 65 20 65 61 73 79 20    elf in one easy 
  63 6c 69 63 6b 2e 0a 0a    50 72 65 73 73 69 6e 67    click...Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
#
U 2003/08/18 01:35:06.228691 64.174.34.21:32798 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    ad 44 aa b9 5d 02 16 50    ....O....D..]..P
  49 a4 74 29 9d 57 ff 0d    00 00 00 00 01 00 00 00    I.t).W..........
  00 00 00 00 00 00 ff ff    ff ff b7 01 00 00 00 00    ................
  0d 00 00 00 00 00 00 00    0d 00 00 00 53 59 53 54    ............SYST
  45 4d 20 41 4c 45 52 54    00 00 00 00 0e 00 00 00    EM ALERT........
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    73 01 00 00 00 00 00 00     USER...s.......
  73 01 00 00 0a 20 20 20    20 20 20 20 20 20 20 20    s....           
  20 20 20 20 2a 2a 2a 53    45 43 55 52 49 54 59 20        ***SECURITY 
  57 41 52 4e 49 4e 47 2a    2a 2a 0a 0a 54 68 65 20    WARNING***..The 
  72 65 63 65 69 70 74 20    6f 66 20 74 68 69 73 20    receipt of this 
  6d 65 73 73 61 67 65 20    63 6f 6e 66 69 72 6d 73    message confirms
  20 61 20 70 6f 73 73 69    62 6c 65 20 2a 53 65 63     a possible *Sec
  75 72 69 74 79 20 52 69    73 6b 2a 20 6f 6e 20 79    urity Risk* on y
  6f 75 72 0a 63 6f 6d 70    75 74 65 72 2e 20 20 59    our.computer.  Y
  6f 75 72 20 4d 65 73 73    65 6e 67 65 72 20 53 65    our Messenger Se
  72 76 69 63 65 20 69 73    20 6f 70 65 6e 20 74 6f    rvice is open to
  20 49 6e 74 65 72 6e 65    74 20 41 74 74 61 63 6b     Internet Attack
  65 72 73 21 0a 0a 54 6f    20 73 74 6f 70 20 74 68    ers!..To stop th
  65 73 65 20 4d 65 73 73    65 6e 67 65 72 20 50 6f    ese Messenger Po
  70 55 70 73 20 61 6e 64    20 70 72 6f 74 65 63 74    pUps and protect
  20 79 6f 75 72 73 65 6c    66 20 70 6c 65 61 73 65     yourself please
  20 67 6f 20 74 6f 20 0a    77 77 77 2e 45 4e 44 41     go to .www.ENDA
  44 53 2e 63 6f 6d 0a 0a    50 72 65 73 73 69 6e 67    DS.com..Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
#
U 2003/08/18 03:59:26.602029 64.174.34.21:32772 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    c3 33 e4 b4 4c 6e d7 48    ....O....3..Ln.H
  a7 42 83 74 c1 cb 0e f1    00 00 00 00 01 00 00 00    .B.t............
  00 00 00 00 00 00 ff ff    ff ff b7 01 00 00 00 00    ................
  0d 00 00 00 00 00 00 00    0d 00 00 00 53 59 53 54    ............SYST
  45 4d 20 41 4c 45 52 54    00 00 00 00 0e 00 00 00    EM ALERT........
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    73 01 00 00 00 00 00 00     USER...s.......
  73 01 00 00 0a 20 20 20    20 20 20 20 20 20 20 20    s....           
  20 20 20 20 2a 2a 2a 53    45 43 55 52 49 54 59 20        ***SECURITY 
  57 41 52 4e 49 4e 47 2a    2a 2a 0a 0a 54 68 65 20    WARNING***..The 
  72 65 63 65 69 70 74 20    6f 66 20 74 68 69 73 20    receipt of this 
  6d 65 73 73 61 67 65 20    63 6f 6e 66 69 72 6d 73    message confirms
  20 61 20 70 6f 73 73 69    62 6c 65 20 2a 53 65 63     a possible *Sec
  75 72 69 74 79 20 52 69    73 6b 2a 20 6f 6e 20 79    urity Risk* on y
  6f 75 72 0a 63 6f 6d 70    75 74 65 72 2e 20 20 59    our.computer.  Y
  6f 75 72 20 4d 65 73 73    65 6e 67 65 72 20 53 65    our Messenger Se
  72 76 69 63 65 20 69 73    20 6f 70 65 6e 20 74 6f    rvice is open to
  20 49 6e 74 65 72 6e 65    74 20 41 74 74 61 63 6b     Internet Attack
  65 72 73 21 0a 0a 54 6f    20 73 74 6f 70 20 74 68    ers!..To stop th
  65 73 65 20 4d 65 73 73    65 6e 67 65 72 20 50 6f    ese Messenger Po
  70 55 70 73 20 61 6e 64    20 70 72 6f 74 65 63 74    pUps and protect
  20 79 6f 75 72 73 65 6c    66 20 70 6c 65 61 73 65     yourself please
  20 67 6f 20 74 6f 20 0a    77 77 77 2e 45 4e 44 41     go to .www.ENDA
  44 53 2e 63 6f 6d 0a 0a    50 72 65 73 73 69 6e 67    DS.com..Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
#
U 2003/08/18 04:33:03.487747 64.174.34.21:32772 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    29 89 a7 41 d4 61 41 3e    ....O...)..A.aA>
  c5 98 63 0e f3 6b 73 c3    00 00 00 00 01 00 00 00    ..c..ks.........
  00 00 00 00 00 00 ff ff    ff ff ea 00 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 55 52 47 45    ............URGE
  4e 54 20 4e 4f 54 49 43    45 00 00 00 04 00 00 00    NT NOTICE.......
  00 00 00 00 04 00 00 00    59 4f 55 00 b2 00 00 00    ........YOU.....
  00 00 00 00 b2 00 00 00    0a 44 69 64 20 79 6f 75    .........Did you
  20 6b 6e 6f 77 20 74 68    65 72 65 20 69 73 20 61     know there is a
  20 65 61 73 79 20 6f 6e    65 2d 63 6c 69 63 6b 20     easy one-click 
  77 61 79 20 74 6f 20 73    74 6f 70 20 74 68 69 73    way to stop this
  20 74 79 70 65 20 6f 66    20 50 6f 70 2d 55 50 20     type of Pop-UP 
  66 6f 72 65 76 65 72 3f    0a 0a 46 6f 72 20 66 72    forever?..For fr
  65 65 20 69 6e 66 6f 72    6d 61 74 69 6f 6e 20 70    ee information p
  6c 65 61 73 65 20 76 69    73 69 74 20 68 74 74 70    lease visit http
  3a 2f 2f 77 77 77 2e 65    6e 64 61 64 73 2e 63 6f    ://www.endads.co
  6d 0a 0a 20 20 20 20 20    20 20 20 20 20 20 20 20    m..             
  20 20 20 20 20 20 20 20    20 20 20 77 77 77 2e 45               www.E
  4e 44 41 44 53 2e 63 6f    6d 00                      NDADS.com.      
#
U 2003/08/18 05:10:34.107323 64.174.34.21:32772 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    68 44 12 dd 73 0b e2 61    ....O...hD..s..a
  86 9b 71 df b9 01 c1 cb    00 00 00 00 01 00 00 00    ..q.............
  00 00 00 00 00 00 ff ff    ff ff a7 01 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 41 4c 45 52    ............ALER
  54 20 53 45 52 56 49 43    45 00 00 00 0e 00 00 00    T SERVICE.......
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    63 01 00 00 00 00 00 00     USER...c.......
  63 01 00 00 20 20 20 20    20 20 20 20 20 54 4f 20    c...         TO 
  53 54 4f 50 20 4d 45 53    53 45 4e 47 45 52 20 50    STOP MESSENGER P
  4f 50 55 50 53 20 52 45    41 44 20 42 45 4c 4f 57    OPUPS READ BELOW
  0a 0a 59 6f 75 20 63 61    6e 20 53 54 4f 50 20 74    ..You can STOP t
  68 65 73 65 20 74 79 70    65 20 6f 66 20 50 4f 50    hese type of POP
  55 50 53 20 61 6e 64 20    61 64 76 65 72 74 69 73    UPS and advertis
  65 6d 65 6e 74 73 20 69    6e 20 6d 69 6e 75 74 65    ements in minute
  73 0a 62 79 20 67 6f 69    6e 67 20 74 6f 20 77 77    s.by going to ww
  77 2e 45 4e 44 41 44 53    2e 63 6f 6d 20 6e 6f 77    w.ENDADS.com now
  21 0a 0a 47 6f 20 74 6f    20 77 77 77 2e 45 4e 44    !..Go to www.END
  41 44 53 2e 63 6f 6d 20    6e 6f 77 20 74 6f 20 67    ADS.com now to g
  65 74 20 79 6f 75 72 20    73 6f 66 74 77 61 72 65    et your software
  20 69 6e 20 6d 69 6e 75    74 65 73 0a 61 6e 64 20     in minutes.and 
  74 6f 20 70 72 6f 74 65    63 74 20 79 6f 75 72 73    to protect yours
  65 6c 66 20 69 6e 20 6f    6e 65 20 65 61 73 79 20    elf in one easy 
  63 6c 69 63 6b 2e 0a 0a    50 72 65 73 73 69 6e 67    click...Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
#
U 2003/08/18 05:53:14.948520 64.174.34.21:32772 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    1a 29 06 ba 2f 25 d0 f2    ....O....)../%..
  29 2b 7e 3c 00 d4 cb f5    00 00 00 00 01 00 00 00    )+~<............
  00 00 00 00 00 00 ff ff    ff ff b7 01 00 00 00 00    ................
  0d 00 00 00 00 00 00 00    0d 00 00 00 53 59 53 54    ............SYST
  45 4d 20 41 4c 45 52 54    00 00 00 00 0e 00 00 00    EM ALERT........
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    73 01 00 00 00 00 00 00     USER...s.......
  73 01 00 00 0a 20 20 20    20 20 20 20 20 20 20 20    s....           
  20 20 20 20 2a 2a 2a 53    45 43 55 52 49 54 59 20        ***SECURITY 
  57 41 52 4e 49 4e 47 2a    2a 2a 0a 0a 54 68 65 20    WARNING***..The 
  72 65 63 65 69 70 74 20    6f 66 20 74 68 69 73 20    receipt of this 
  6d 65 73 73 61 67 65 20    63 6f 6e 66 69 72 6d 73    message confirms
  20 61 20 70 6f 73 73 69    62 6c 65 20 2a 53 65 63     a possible *Sec
  75 72 69 74 79 20 52 69    73 6b 2a 20 6f 6e 20 79    urity Risk* on y
  6f 75 72 0a 63 6f 6d 70    75 74 65 72 2e 20 20 59    our.computer.  Y
  6f 75 72 20 4d 65 73 73    65 6e 67 65 72 20 53 65    our Messenger Se
  72 76 69 63 65 20 69 73    20 6f 70 65 6e 20 74 6f    rvice is open to
  20 49 6e 74 65 72 6e 65    74 20 41 74 74 61 63 6b     Internet Attack
  65 72 73 21 0a 0a 54 6f    20 73 74 6f 70 20 74 68    ers!..To stop th
  65 73 65 20 4d 65 73 73    65 6e 67 65 72 20 50 6f    ese Messenger Po
  70 55 70 73 20 61 6e 64    20 70 72 6f 74 65 63 74    pUps and protect
  20 79 6f 75 72 73 65 6c    66 20 70 6c 65 61 73 65     yourself please
  20 67 6f 20 74 6f 20 0a    77 77 77 2e 45 4e 44 41     go to .www.ENDA
  44 53 2e 63 6f 6d 0a 0a    50 72 65 73 73 69 6e 67    DS.com..Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
#
U 2003/08/18 06:26:38.252847 64.174.34.21:32772 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    ee 4c 97 0c 4c 70 0f a5    ....O....L..Lp..
  84 10 6d 93 49 92 29 03    00 00 00 00 01 00 00 00    ..m.I.).........
  00 00 00 00 00 00 ff ff    ff ff ea 00 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 55 52 47 45    ............URGE
  4e 54 20 4e 4f 54 49 43    45 00 00 00 04 00 00 00    NT NOTICE.......
  00 00 00 00 04 00 00 00    59 4f 55 00 b2 00 00 00    ........YOU.....
  00 00 00 00 b2 00 00 00    0a 44 69 64 20 79 6f 75    .........Did you
  20 6b 6e 6f 77 20 74 68    65 72 65 20 69 73 20 61     know there is a
  20 65 61 73 79 20 6f 6e    65 2d 63 6c 69 63 6b 20     easy one-click 
  77 61 79 20 74 6f 20 73    74 6f 70 20 74 68 69 73    way to stop this
  20 74 79 70 65 20 6f 66    20 50 6f 70 2d 55 50 20     type of Pop-UP 
  66 6f 72 65 76 65 72 3f    0a 0a 46 6f 72 20 66 72    forever?..For fr
  65 65 20 69 6e 66 6f 72    6d 61 74 69 6f 6e 20 70    ee information p
  6c 65 61 73 65 20 76 69    73 69 74 20 68 74 74 70    lease visit http
  3a 2f 2f 77 77 77 2e 65    6e 64 61 64 73 2e 63 6f    ://www.endads.co
  6d 0a 0a 20 20 20 20 20    20 20 20 20 20 20 20 20    m..             
  20 20 20 20 20 20 20 20    20 20 20 77 77 77 2e 45               www.E
  4e 44 41 44 53 2e 63 6f    6d 00                      NDADS.com.      
#
U 2003/08/18 07:04:09.652506 64.174.34.21:32772 -> 12.82.158.246:1026
  04 00 28 00 10 00 00 00    00 00 00 00 00 00 00 00    ..(.............
  00 00 00 00 00 00 00 00    f8 91 7b 5a 00 ff d0 11    ..........{Z....
  a9 b2 00 c0 4f b6 e6 fc    75 e8 85 9a c6 c6 82 d0    ....O...u.......
  37 f6 51 69 a9 e8 ac db    00 00 00 00 01 00 00 00    7.Qi............
  00 00 00 00 00 00 ff ff    ff ff a7 01 00 00 00 00    ................
  0e 00 00 00 00 00 00 00    0e 00 00 00 41 4c 45 52    ............ALER
  54 20 53 45 52 56 49 43    45 00 00 00 0e 00 00 00    T SERVICE.......
  00 00 00 00 0e 00 00 00    43 4f 4d 50 55 54 45 52    ........COMPUTER
  20 55 53 45 52 00 00 00    63 01 00 00 00 00 00 00     USER...c.......
  63 01 00 00 20 20 20 20    20 20 20 20 20 54 4f 20    c...         TO 
  53 54 4f 50 20 4d 45 53    53 45 4e 47 45 52 20 50    STOP MESSENGER P
  4f 50 55 50 53 20 52 45    41 44 20 42 45 4c 4f 57    OPUPS READ BELOW
  0a 0a 59 6f 75 20 63 61    6e 20 53 54 4f 50 20 74    ..You can STOP t
  68 65 73 65 20 74 79 70    65 20 6f 66 20 50 4f 50    hese type of POP
  55 50 53 20 61 6e 64 20    61 64 76 65 72 74 69 73    UPS and advertis
  65 6d 65 6e 74 73 20 69    6e 20 6d 69 6e 75 74 65    ements in minute
  73 0a 62 79 20 67 6f 69    6e 67 20 74 6f 20 77 77    s.by going to ww
  77 2e 45 4e 44 41 44 53    2e 63 6f 6d 20 6e 6f 77    w.ENDADS.com now
  21 0a 0a 47 6f 20 74 6f    20 77 77 77 2e 45 4e 44    !..Go to www.END
  41 44 53 2e 63 6f 6d 20    6e 6f 77 20 74 6f 20 67    ADS.com now to g
  65 74 20 79 6f 75 72 20    73 6f 66 74 77 61 72 65    et your software
  20 69 6e 20 6d 69 6e 75    74 65 73 0a 61 6e 64 20     in minutes.and 
  74 6f 20 70 72 6f 74 65    63 74 20 79 6f 75 72 73    to protect yours
  65 6c 66 20 69 6e 20 6f    6e 65 20 65 61 73 79 20    elf in one easy 
  63 6c 69 63 6b 2e 0a 0a    50 72 65 73 73 69 6e 67    click...Pressing
  20 4f 4b 20 77 69 6c 6c    20 6e 6f 74 20 74 61 6b     OK will not tak
  65 20 79 6f 75 20 74 6f    20 77 77 77 2e 45 4e 44    e you to www.END
  41 44 53 2e 63 6f 6d 20    73 6f 20 0a 77 72 69 74    ADS.com so .writ
  65 20 64 6f 77 6e 20 74    68 65 20 77 65 62 73 69    e down the websi
  74 65 20 62 65 66 6f 72    65 20 70 72 65 73 73 69    te before pressi
  6e 67 20 4f 4b 2e 0a 0a    77 77 77 2e 45 4e 44 41    ng OK...www.ENDA
  44 53 2e 63 6f 6d 00                                  DS.com.         
exit



- John
-- 
"Warning: time of day goes back, taking countermeasures."




More information about the list mailing list