Re: Second wave of Nimda?

[Jensenne Roculan <jroculan () securityfocus com>]

Hi there,

The ARIS analysis of the Nimda email propagation reactivation issue can be
found at:

http://aris.securityfocus.com/alerts/nimda/010926-Alert-Nimda-Reactivation.pdf

Hope this helps.

Jensenne Roculan
SecurityFocus - http://www.securityfocus.com
ARIS - http://aris.securityfocus.com
(403) 213-3939 ext. 229

> Tracey Losco wrote:
> > Has anyone heard of this and is there any merit in its possibility?
> > In the code for the worm, there was a "get system time" call...I was
> > wondering whether or not it was for computations or whether it was a
> > timer....it this is true, it looks like it was a timer....
> >
> > Researchers say Nimda set to propagate again
> >
> > By Deborah Radcliff, Computerworld online
> > September 27, 2001 10:52 am PT
> >
> > RESEARCHERS HAVE DISCOVERED a third vector to the Nimda worm, which is
> > set to propagate again through e-mail at 1 a.m. ET Friday.
> >
> > The website is located:
> >
> > http://www.infoworld.com/articles/hn/xml/01/09/27/010927hnnimbda.xml?0927alert


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com