nanog mailing list archives
Re: Possibly yet another MS mail worm
From: "Rubens Kuhl Jr." <rubens () email com>
Date: Sat, 28 Feb 2004 21:45:46 -0300
It's annoying how easily these things spread even though they don't rely
on
a specific OS vulnerabililty -- hell, it's an executable *in a zipfile*,
so
it requires opening the zipfile and then running the program inside it.
Of
course everyone will run it, even though it's named dygfwefuih.exe (random characters before .exe). <grumble>
Being in a zipfile is exactly why these things work: most mail systems nowadays drop executable attachments without mercy, but a zipfile may be a compressed document. Not every mail system screen incoming messages with anti-virus. People writing this worms don't know just a bit about human behaviour, they seem to keep up with trends in mail systems administration as well. Rubens
Current thread:
- Possibly yet another MS mail worm Todd Vierling (Feb 27)
- Re: Possibly yet another MS mail worm Stephen Milton (Feb 27)
- Re: Possibly yet another MS mail worm Todd Vierling (Feb 28)
- Re: Possibly yet another MS mail worm Rubens Kuhl Jr. (Feb 28)
- Re: Possibly yet another MS mail worm Todd Vierling (Feb 28)
- Re: Possibly yet another MS mail worm Stephen Milton (Feb 27)