Vulnerability Development mailing list archives

Re: New worm?


From: verkoop () ATZ NL (A.T.Z.)
Date: Thu, 4 May 2000 16:18:18 +0200


More info at: http://www.datafellows.com/v-descs/love.htm

gr.

B.

At 07:07 4-5-2000 -0700, Blue Boar wrote:
I received two copies of this worm-looking thing this morning.  I don't
have time to look myself before I head out, but I thought the list
might be interested.  The second copy looks like someone who got it
themselves and wants to know what it is.

Attached is a zip, and inside it is another zip of the two files
wrapped in their original mail headers.. so it should be pretty
safe unless you go out of your way to run them.  In which case,
caveat subscriber.

It looks like VBScript, and has a .vbs extension, and diddles
with reg keys, so I assume it's after windows boxen with WSH
installed.

                                BB

Met vriendelijke groet,
Advanced Technology Zeeland

B. van Ouwerkerk
Verkoop

A.T.Z. op internet http://www.atz.nl  e-mail verkoop () atz nl


Current thread: