Re: New virus?

["Vince is a dickhead" <we_hate_vince () hotmail com>]

I'll bet the Admin of  http://www.fotosgratis.pop.com.br is wondering why so many ip addresses are hiting his site all 
of a sudden.
  ----- Original Message ----- 
  From: Adam Jacob Muller 
  Cc: <full-disclosure () lists netsys com> 
  Sent: Monday, September 27, 2004 5:26 PM
  Subject: Re: [Full-disclosure] New virus?


  What's the contents of the files...
  requests for those files result in 404's
  like
  http://www.fotosgratis.pop.com.br/botao.txt 

  So what urls are they fetching, or is the 404 the result the clients receive?


  Adam Jacob Muller


  Where is it written in the Constitution, in what article or section is it contained, that you may take children from 
their parents and parents from their children, and compel them to fight the battles of any war in which the folly and 
wickedness of the government may engage itself? Under what concealment has this power lain hidden, which now for the 
first time comes forth, with a tremendous and baleful aspect, to trample down and destroy the dearest right of personal 
liberty? Who will show me any Constitutional injunction which makes it the duty of the American people to surrender 
everything valuable in life, and even life, itself, whenever the purposes of an ambitious and mischievous government 
may require it? . . . A free government with an uncontrolled power of military conscription is the most ridiculous and 
abominable contradiction and nonsense that ever entered into the heads of men.
  -Daniel Webster
  On Sep 27, 2004, at 1:44 PM, Bernardo Santos Wernesback wrote:


    Hi everyone,
     
    Has anyone seen a lot of HTTP activity to a certain site: http://www.fotosgratis.pop.com.br ?
     
    One of our clients has several machines making tons of requests for TXT files on that server:
     
    botao.txt
    mswinsck.txt
    ita01.txt
    caixa01.txt
    teclado07.txt
    caixa01.txt
    caixa02.txt
    caixa03.txt
    caixa04.txt
    caixa05.txt
     
    Thanks for any info.,

    _____________________________________________________

    Bernardo Santos Wernesback

    <image.tiff>ESSE,ESS,SCSE,CCNA/DA,


    CCSA,CQS,MCP

     


    Consultant / ISH Tecnologia 

     



    Phone: +55-27-3334-8900


    Mobile: +55-27-8111-0884


    Email: bernardo () ish com br

      PGP Fingerprint:
       6A42 3701 70D7 FD0F 5FA9  D232 CDD4 6189 EF43 95F5