Full Disclosure mailing list archives
Re: AOL IM Worm
From: "Keith W. McCammon" <keith-list () mccammon org>
Date: Wed, 11 Feb 2004 14:22:28 -0500
This made the rounds yesterday (briefly) on the Incidents lists: http://archives.neohapsis.com/archives/incidents/2004-02/0027.html Justin Baldini wrote:
There appears to be an AOL IM worm going around. It's coming in as a link to here... http://www.wgutv.com/osama_capXXXture.php?nLRj (Without the XXX) When run, it appears to load up some fake game, installs a bunch of shit, and then sends itself to everyone on your IM list. Channelup.exe and blengine.exe appear to be the task list entries. Thats about all the info I have. ++++++++++++++ Justin Baldini Network Admin _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- AOL IM Worm Justin Baldini (Feb 11)
- Re: AOL IM Worm Keith W. McCammon (Feb 11)
- SV: AOL IM Worm Peter Kruse (Feb 11)
- Re: AOL IM Worm Mary Landesman (Feb 11)
- Re: AOL IM Worm Exibar (Feb 11)
- Re: AOL IM Worm Mary Landesman (Feb 11)
- Re: AOL IM Worm Exibar (Feb 11)
- Re: AOL IM Worm Nick FitzGerald (Feb 11)
- <Possible follow-ups>
- RE: AOL IM Worm Turk, Anthony (Feb 11)
- Re: AOL IM Worm Keith W. McCammon (Feb 11)