Re: New Worm

From: Naseer Bhatti (naseerat_private)
Date: Tue Sep 18 2001 - 14:25:02 PDT

Next message: Dan Jones: "Re: New "concept" virus/worm?"

Previous message: Aj Effin Reznor: "More on the Worm"
In reply to: Enrique A. Compañ Gzz.: "New Worm"
Next in thread: Ray Simard: "Re: New Worm"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

The worm sends E-mail to the following mail servers

omega.serpro.gov.br (161.148.173.118)
server1.sans.org (167.216.133.33 )
smtp.china.com (61.135.144.88)
perninha.conectiva.com.br (200.250.58.156)
phuck.nether.net (204.42.254.5)
mx.ideal.ru (212.69.101.252)
tarkin.fdt.net (209.212.128.45)


----- Original Message -----
From: "Enrique A. Compañ Gzz." <enriqueat_private>
To: <vuln-devat_private>
Sent: Tuesday, September 18, 2001 9:17 PM
Subject: New Worm


> Yes, yes.... a new "$%"·$ worm.
>
> Again, by chinesse terrorist (I cannot refer them other way).
>
>
> an example of this (BECAREFUL) can be seen at http://64.218.116.235
>
> Don't go there if you aren't protected. it downloads readme.eml
> automatically and executes.
>
> It seg faults on my machine... fortunally
>
>

Next message: Dan Jones: "Re: New "concept" virus/worm?"
Previous message: Aj Effin Reznor: "More on the Worm"
In reply to: Enrique A. Compañ Gzz.: "New Worm"
Next in thread: Ray Simard: "Re: New Worm"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Sep 18 2001 - 15:39:09 PDT