Re: New "concept" virus/worm?

[Brett Glass <brett () lariat org>]

At 10:21 AM 9/18/2001, Jay D. Dyson wrote:

>        It's a two-prong worm.  It appears to be primarily disseminated
> via e-mail, and then launches its attacks on web hosts upon successful
> infection.

Newsbytes is calling this worm "Code Rainbow," while some of the antivirus
firms seem to be calling it "W32.Nimda.A@mm".

Can the e-mail infect anything other than Windows NT/2000? Will it infect
a system that's running Windows NT/2000 but not IIS? If a Windows 95/98/ME 
user opens it, will his or her system begin to spread the worm as well?

--Brett Glass


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com