concept virus

From: Burak DAYIOGLU (dayiogluat_private)
Date: Wed Sep 19 2001 - 05:25:13 PDT

Next message: Royans Tharakan: "RE: W32.Nimda Infecting Executables !!!! :-("

Previous message: John Ellingsworth: "Microsoft advisory"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

hi,
One thing that I have had not seen mentioned frequently
is that the virus shares c:\ directory as "c$". As the
guest user is given administrator priviledges, this might
be important.

I'm unsure about whether the virus uses Windows shares to
download copies onto victims or not.

I hope this reminder helps some.

regards.
-- 
Burak DAYIOGLU
Phone: +90 312 2103379   Fax: +90 312 2103333
       http://www.dayioglu.net

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Royans Tharakan: "RE: W32.Nimda Infecting Executables !!!! :-("
Previous message: John Ellingsworth: "Microsoft advisory"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Sep 19 2001 - 09:39:08 PDT