Re: New worm?

[dufresne () WINTERNET COM (Ron DuFresne)]

I had someone try and send out a file the other day, a .vbs script that
might well be the same thing, though, it was sent /dcc, someone want to
look it over and compare?  Was sent from a norway user, tried to slip it
in and perhaps get my client to run it, but, we play unix here <smile>...

Thanks,

Ron DuFresne

On Thu, 4 May 2000, Blue Boar wrote:

> I received two copies of this worm-looking thing this morning.  I don't
> have time to look myself before I head out, but I thought the list
> might be interested.  The second copy looks like someone who got it
> themselves and wants to know what it is.
>
> Attached is a zip, and inside it is another zip of the two files
> wrapped in their original mail headers.. so it should be pretty
> safe unless you go out of your way to run them.  In which case,
> caveat subscriber.
>
> It looks like VBScript, and has a .vbs extension, and diddles
> with reg keys, so I assume it's after windows boxen with WSH
> installed.
>
>                               BB

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
        ***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.