Vulnerability Development mailing list archives
Re: New worm?
From: dufresne () WINTERNET COM (Ron DuFresne)
Date: Thu, 4 May 2000 15:01:26 -0500
I had someone try and send out a file the other day, a .vbs script that might well be the same thing, though, it was sent /dcc, someone want to look it over and compare? Was sent from a norway user, tried to slip it in and perhaps get my client to run it, but, we play unix here <smile>... Thanks, Ron DuFresne On Thu, 4 May 2000, Blue Boar wrote:
I received two copies of this worm-looking thing this morning. I don't have time to look myself before I head out, but I thought the list might be interested. The second copy looks like someone who got it themselves and wants to know what it is. Attached is a zip, and inside it is another zip of the two files wrapped in their original mail headers.. so it should be pretty safe unless you go out of your way to run them. In which case, caveat subscriber. It looks like VBScript, and has a .vbs extension, and diddles with reg keys, so I assume it's after windows boxen with WSH installed. BB
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ "Cutting the space budget really restores my faith in humanity. It eliminates dreams, goals, and ideals and lets us get straight to the business of hate, debauchery, and self-annihilation." -- Johnny Hart ***testing, only testing, and damn good at it too!*** OK, so you're a Ph.D. Just don't touch anything.
Current thread:
- New worm?, (continued)
- New worm? Blue Boar (May 04)
- Re: New worm? Andri Saar (May 04)
- Re: New worm? A.T.Z. (May 04)
- Re: New worm? Sander Smeenk (CistroN Medewerker) (May 04)
- Re: New worm? M J (May 04)
- Re: New worm? Erik Kooijman (May 04)
- email worm, NOT iloveyou Hinken, Brian (May 04)
- Re: New worm? 3APA3A (May 04)
- I Love you virus cure for exchange server NT sven (May 04)
- "I Love You" worm Voodoo Chile (May 04)
- Re: New worm? Ron DuFresne (May 04)
- Re: New worm? Bluefish (May 04)
- lovethingy spread analyses Roelof Temmingh (May 04)
- I love you. Blue Boar (May 04)
- Re: ethernet cards & promisc mode C.J. Oster (May 04)
- Re: ethernet cards & promisc mode Stuart Henderson (May 04)
- Re: ethernet cards & promisc mode Granquist, Lamont (May 04)
- Help me audit a mail filter in C, please? Bennett Todd (May 04)
- Re: ethernet cards & promisc mode David LaPorte (May 04)
- Re: ethernet cards & promisc mode Granquist, Lamont (May 05)
- Re: ethernet cards & promisc mode Bluefish (May 07)