I just found this myself and am digging into it now.....needless to say, this is not Tor.<br><br><br><div><span class="gmail_quote">On 9/6/07, <b class="gmail_sendername">loki der quaeler</b> <<a href="mailto:loki-lists@weltschmerz.org">
loki-lists@weltschmerz.org</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><br>new trojan mask variant: (105% evil)<br>
<br>Begin forwarded message:<br><br>> Return-Path: <<a href="mailto:prasad.bolar@dnaindia.net">prasad.bolar@dnaindia.net</a>><br>> Delivered-To: <a href="mailto:7-loki-lists@weltschmerz.org">7-loki-lists@weltschmerz.org
</a><br>> Received: (qmail 18515 invoked from network); 6 Sep 2007 05:49:08<br>> -0700<br>> Received: from <a href="http://103-134-124-91.pool.ukrtel.net">103-134-124-91.pool.ukrtel.net</a> (<a href="http://91.124.134.103">
91.124.134.103</a>)<br>> by <a href="http://www.weltschmerz.org">www.weltschmerz.org</a> with SMTP; 6 Sep 2007 05:49:08 -0700<br>> Received: from zbcdphd by <a href="http://103-134-124-91.pool.ukrtel.net">103-134-124-91.pool.ukrtel.net
</a> with local<br>> (Exim 4.66 (FreeBSD))<br>> id 1ITH-000LCI-41<br>> for <a href="mailto:loki-lists@weltschmerz.org">loki-lists@weltschmerz.org</a>; Thu, 6 Sep 2007 15:48:54 +0300<br>> To: <
<a href="mailto:loki-lists@weltschmerz.org">loki-lists@weltschmerz.org</a>><br>> Subject: Careful, <a href="http://you.re">you.re</a> being watched.<br>> From: <<a href="mailto:prasad.bolar@dnaindia.net">prasad.bolar@dnaindia.net
</a>><br>> Content-Type: text/html;charset=iso-8859-1<br>> Content-Transfer-Encoding: 7BIT<br>> Message-Id: <<a href="mailto:1ITH-000LCI-41@103-134-124-91.pool.ukrtel.net">1ITH-000LCI-41@103-134-124-91.pool.ukrtel.net
</a>><br>> Sender: User zbcdphd <<a href="mailto:zbcdphd@103-134-124-91.pool.ukrtel.net">zbcdphd@103-134-124-91.pool.ukrtel.net</a>><br>> Date: Thu, 6 Sep 2007 15:48:54 +0300<br>><br>> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML
4.0 Transitional//EN"><br>> <html><br>> <body><br>> Everyone who is doing file trading is at risk. Read the news on<br>> RIAA and what they are doing to everyone they find. Your privacy<br>
> can be safe again with our new technology. Save yourself from an<br>> attack and use this free software now. <a href="http://<br>> <a href="http://61.228.78.61/">61.228.78.61/</a>">Download Tor</a>
<br>> </body><br>> </html><br>><br><br></blockquote></div><br>