Vulnerability Development mailing list archives
Re: New worm?
From: JimS () OPTIMADIRECT COM (Jim Swanson)
Date: Thu, 4 May 2000 10:24:32 -0400
We just got hit with the "I Love You" vbs virus. Only 4 people were infected, but it infects about 10 different files AND the registry. Very nasty. It then e-mails itself out to everyone on your distribution lists in Outlook. -----Original Message----- From: Blue Boar [mailto:BlueBoar () THIEVCO COM] Sent: Thursday, May 04, 2000 10:07 AM To: VULN-DEV () SECURITYFOCUS COM Subject: New worm? I received two copies of this worm-looking thing this morning. I don't have time to look myself before I head out, but I thought the list might be interested. The second copy looks like someone who got it themselves and wants to know what it is. Attached is a zip, and inside it is another zip of the two files wrapped in their original mail headers.. so it should be pretty safe unless you go out of your way to run them. In which case, caveat subscriber. It looks like VBScript, and has a .vbs extension, and diddles with reg keys, so I assume it's after windows boxen with WSH installed. BB
Current thread:
- Re: New worm? Greene, Patrick (May 04)
- <Possible follow-ups>
- Re: New worm? Jim Swanson (May 04)
- Re: New worm? Matthew R. Potter (May 04)
- Re: New worm? Bluefish (May 05)
- Re: New worm? Matthew R. Potter (May 04)
- Re: New worm? mick chang (May 04)
- Re: New worm? Rich Corbett (May 04)
- Re: New worm? Edwin Concepcion (May 04)
- Re: New worm? Todd C. Campbell (May 10)
- Re: New worm? Dan Schrader (May 11)
- Re: New worm? Dimitry Andric (May 12)
- Re: New worm? Thierry Zoller (Apr 13)
- ScriptGuard Crispin Cowan (May 16)
- Re: New worm? Dimitry Andric (May 12)