Re: New Worm similar to BadTrans.B?

From: zeno (bugtraqat_private)
Date: Wed Nov 28 2001 - 06:30:51 PST

  • Next message: Aron_Croftat_private: "Re: New Worm similar to BadTrans.B? [Virus Checked]"

    I've been getting .pif ,exe .mp3 and ,scr also. Maybe 15 today alone.
    All with same mime type you describe.
    
    - zenoat_private
    
    
    > 
    > Mailer: SecurityFocus
    > 
    > Hi,
    > 
    > our company has recieved some e-mails containing 
    > the some attachments (all of them as mime-type 
    > audio/wav) like:
    > IS_LINUX_GOOD_ENOUGHX.TXT.pif
    > MATRiX_2_is_OUT.SCR
    > 
    > But the filesize differs from the BadTrans.B worm 
    > which we also recieved. Interesting output of 
    > "strings IS_LINUX_GOOD_ENOUGHX.TXT.pif":
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Wed Nov 28 2001 - 10:24:15 PST