More on the Worm

From: Aj Effin Reznor (ajat_private)
Date: Tue Sep 18 2001 - 11:52:37 PDT

Next message: w1re p4ir: "Admin.dll (strings ./Admin.dll)"

Previous message: Tom Brenner: "RE: New "concept" virus/worm?"
Next in thread: Aj Effin Reznor: "More on the Worm"
Reply: Michael H. Warfield: "Re: More on the Worm"
Reply: Michael H. Warfield: "Re: More on the Worm"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Seems this may also be hitting somehow on/over SAMBA.

A colleague (Alien8) had this to say about his SGI Indy
with SAMBA running:

"I started seeing a printout (w/no actual print command) 
of the file (not sure why) and realized it was coming 
from my indy... there was all sorts of traffic so i ran 
tcpdump, and then turned off samba alltogether and it 
nearly disappeared (the traffic)"



-aj.



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: w1re p4ir: "Admin.dll (strings ./Admin.dll)"
Previous message: Tom Brenner: "RE: New "concept" virus/worm?"
Next in thread: Aj Effin Reznor: "More on the Worm"
Reply: Michael H. Warfield: "Re: More on the Worm"
Reply: Michael H. Warfield: "Re: More on the Worm"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Sep 18 2001 - 13:34:20 PDT