RE: Virus heads-up

["Sykes, Phil" <Phil.Sykes () cweurope net>]

[Sorry about the non-operational content]

 I complained at SkyInet.net about two hours ago - they were very responsive
and said they'd pull the offending files immediately.   
 They seem to have done so.

 If anyone wants removal instructions, LMK. Also, if anyone wants a copy of
the .exe for analysis, I have one.

Cheers,

Phil Sykes, Network Engineer
Cable & Wireless Europe
p: +49 89 92699 204 m: +49 172 89 79 727

> -----Original Message-----
> From: Simon Lockhart [mailto:simonl () rd bbc co uk]
> Sent: 04 May 2000 12:18
> To: nanog () merit edu
> Subject: Virus heads-up
>
>
>
> Heads up on a new virus - ILOVEYOU
>
> I'm sure you've heard about it already, but you may wish to block 
> www.skyinet.net (206.101.197.226) at your borders, as that is 
> where it 
> fetches part of the actual virus code from:
>
> 132.185.x.y - - [04/May/2000:10:23:14 +0100] "GET 
> http://www.skyinet.net/~y
> oung1s/HJKhjnwerhjkxcvytwertnMTFwetrdsfmhPnjw6587345gvsdf7679n
> jbvYT/WIN-BUG
> SFIX.exe HTTP/1.0"
>
> Other than that, it looks like just another Melissa.
>
> Simon
> -- 
> Simon Lockhart                       |   Tel: +44 (0)1737 839676 
> Internet Engineering Manager         |   Fax: +44 (0)1737 839516 
> BBC Internet Services                | Email: 
> Simon.Lockhart () bbc co uk 
> Kingswood Warren,Tadworth,Surrey,UK  |   URL: 
> http://support.bbc.co.uk/