Security Incidents mailing list archives

Re: homepage worm


From: reb () OPENRECORDS ORG
Date: Wed, 9 May 2001 17:02:55 -0500

Greetings,

We have only had 8 of these emails sent to us, and Groupshield for
Exchange (with latest dats) caught all of them.

Reb

On Wed, 9 May 2001, black-hand wrote:

Hi,

There is a new VBS worm doing its rounds down here in Australia at the
moment, a lot of virus scanners arnt picking it up. Its not a malicious
payload, but still..

ive put up the email, attachment and payload info here:

http://black.wiretapped.net/homepagevirus.asp

to bypass virus scanners, it does a simple decypher then execute

black-hand
wiretapped - 2600 australia
http://black.wiretapped.net



Current thread: