Vulnerability Development mailing list archives
RE: Win32.Sircam.Worm Alert.....
From: "Tom Geldner" <tom () xor cc>
Date: Tue, 24 Jul 2001 09:34:35 -0700
-----Original Message----- From: Johnson, Greg [mailto:JohnsonG () missouri edu]
Don't let the e-mail tip-off fool you. In our University environment we find this and related worms spread primarily via unprotected writeable Windows shares. It also gets in when a user without up-to-date anti-virus software accesses an e-mail server other than our own which has an anti-virus filter. Bim-ba-boom!
Some of our corporate accounts have been pounded on by a particular user on verizon.net. None of those e-mail addresses are from someone's address book. They are all things like info@, webmaster@, postmaster@ etc. so in our case, someone seems to be trying to propogate it deliberately. Tom
Current thread:
- RE: Win32.Sircam.Worm Alert..... Johnson, Greg (Jul 24)
- RE: Win32.Sircam.Worm Alert..... Tom Geldner (Jul 24)
- RE: Win32.Sircam.Worm Alert..... Jeremy Rodriguez (Jul 25)
- Re: Win32.Sircam.Worm Alert..... Nicolas Gregoire (Jul 25)
- Re:Sircam Kimberly Anne McKinnis (Jul 26)
- RE: Sircam Dom De Vitto (Jul 26)
- <Possible follow-ups>
- Re: Win32.Sircam.Worm Alert..... Kimberly Anne McKinnis (Jul 24)
- Re: Win32.Sircam.Worm Alert - Report from Argentina Mariano Vassallo (Jul 25)
- RE: Win32.Sircam.Worm Alert..... Arturo "Buanzo" Busleiman (Jul 25)
- RE: Win32.Sircam.Worm Alert..... Eric D. Williams (Jul 25)
- Re: Win32.Sircam.Worm Alert..... Nicolas Gregoire (Jul 25)
- Re: Win32.Sircam.Worm Alert..... Bruno Lustosa (Jul 25)
(Thread continues...)
- RE: Win32.Sircam.Worm Alert..... Tom Geldner (Jul 24)