blank email = 138K?

Printable View

September 5th, 2002, 05:47 PM
djhuk

blank email = 138K?

I got one of those dodgy emails, the kind that usually have a virus. The file size was 138K, but there was no text in the actual email and no attachment showed.
How can it be like that?
September 5th, 2002, 05:59 PM
bludgeon

Did you view the source to see if there's any javascript in it?? Still wouldn't account for the size, have to be a lot of code, but it'd be a start.
September 5th, 2002, 06:16 PM
Guus

Post the source, that'll at least give us somewhere to start ...
September 5th, 2002, 06:24 PM
CXGJarrod

I recieved a blank email the other night that had a VB script virus in it. It was around 130k....
September 5th, 2002, 06:26 PM
djhuk

sorry, i deleted it. But i'll look out for another one.

Looking on the symantec website it looks like it could be a VB script. Would the virus still work if the email was simply opened in Hotmail?
September 5th, 2002, 06:36 PM
aeallison

Was it on a POP e-mail account or some type of web based e-mail? You still might be able to recover it.

<edit>Ooops, I think I had my question answered before I asked it...LOL sorry djhuk</edit>
September 5th, 2002, 06:40 PM
Guus

138k is A LOT of code ... I'm thinking images size 0 ...
September 5th, 2002, 06:49 PM
djhuk

It was in junk mail on Hotmail
September 5th, 2002, 06:51 PM
micael

Quote:

Originally posted here by djhuk
I got one of those dodgy emails, the kind that usually have a virus. The file size was 138K, but there was no text in the actual email and no attachment showed.
How can it be like that?

I recieved some mails with the same size earlier.. It was either Klez or the Sircam virus I got (most likely Klez). It was funny that it was a blank email and not even a attachment showed up in my webmail..

First when I forwarded the mail to my "normal" inbox did my virus scanner detect the virus as an attachment.
September 5th, 2002, 08:24 PM
Shaggy

I get the same thing at least 40 times a day. It is almost always Klez.
September 5th, 2002, 08:49 PM
zaggy

Whenever I get one of those emails, I usually find the actual content of the email in quarantine section of my norton's. Seems like Nortons takes the code or content, quarantines it and I can view it there without running it. This may not be what it actually does but it sure seems like it.