Vulnerability Development mailing list archives
Re: Another new worm???
From: zoa_chien () INAME COM (Zoa_Chien)
Date: Tue, 20 Jun 2000 08:09:03 +0200
This file has the same header as the thisreallyworks.txt file that was send in javascript a while ago (and that got placed on your desktop. (just look in the vuln-dev list a while ago) Zoa_Chien
This copy was provided to the SecurityFocus folks today by Ron Greer. Password is "worm", without the quotes. It appears to be a known virus/worm: http://vil.mcafee.com/dispVirus.asp?virus_k=98668 They're (McAfee) saying they got word on 5/30, and the deal is that it seems to have gotten loose today. Also: http://www.antivirus.com/pc-cillin/vinfo/virusencyclo/default5.asp?VName=VB S_STAGES.A It looks like it's got a Word header on it (which seems strange to me for a .shs extension) and it's partially obscufucated. I'd be interested in seeing some analysis. BB
Current thread:
- Another new worm??? Studio1057 () AOL COM (Jun 19)
- Re: Another new worm??? Pierre Vandevenne (Jun 19)
- Re: Another new worm??? Kenneth Williams (Jun 19)
- Re: Another new worm??? Blue Boar (Jun 19)
- Re: Another new worm??? Jason Legate (Jun 19)
- Re: Another new worm??? Ron DuFresne (Jun 19)
- <Possible follow-ups>
- Re: Another new worm??? PS Howe (Jun 19)
- Re: Another new worm??? Alexander Kiwerski (Jun 19)
- Re: Another new worm??? Zoa_Chien (Jun 19)
- Re: Another new worm??? Alexander Kiwerski (Jun 19)
- Re: Another new worm??? Dan Schrader (Jun 20)
- Re: Another new worm??? Blue Boar (Jun 20)
- Re: Another new worm??? Bennett Todd (Jun 20)
- Re: Another new worm??? ~jim (Jun 20)
- Re: Another new worm??? Justin Randall (Jun 20)
- Re: Another new worm??? (long) Pierre Vandevenne (Jun 21)
- Re: Another new worm??? Joe Gee (Jun 20)
- Re: Another new worm??? Dan Schrader (Jun 21)
- Re: Another new worm??? Bennett Todd (Jun 21)
(Thread continues...)
- Re: Another new worm??? Pierre Vandevenne (Jun 19)