RE: W32.Netsky-B.worm spreading (name may vary)

["Randal, Phil" <prandal () herefordshire gov uk>]

We haven't seen a single Bagle.b since 12:37 GMT today.  My guess is that
the infected boxes are now spreading Netsky instead.

Phil

---------------------------------------------
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK 

> -----Original Message-----
> From: full-disclosure-admin () lists netsys com
> [mailto:full-disclosure-admin () lists netsys com]On Behalf Of 
> Pete Fanning
> Sent: 18 February 2004 16:04
> To: 'Full Disclosure List'
> Subject: Re: [Full-disclosure] W32.Netsky-B.worm spreading (name may
> vary)
>
>
> Maybe I'm paranoid, but after applying DAT 4325 to my 
> Webshield server this morning to catch this new worm I all of 
> a suddon STOPPED catching Bagle.B.
>
> Maybe just a coincedence....maybe not.....
>
> ---
> Pete Fanning
> MATC Technical Services
> Internet: fanningp () matc edu
>
>
> > > > Peter Kruse<kruse () krusesecurity dk> 2/18/2004 7:57:28 AM >>>
> Hi All,
>
> This is a heads up.
>
> A small modification of NetSky-A has started spreading in 
> some european
> countries. Check your favorite AV-vendor for further details.
>
> Regards
> Peter Kruse
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html 
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html