Re: New "concept" virus/worm?

From: Mark Kennedy (mkennedyat_private)
Date: Tue Sep 18 2001 - 12:35:34 PDT

  • Next message: TJ Jablonowski: "Re: Admin.dll (strings ./Admin.dll)"

    Check out this page for more information:
    
    http://securityresponse.symantec.com/avcenter/venc/data/w32.nimda.aat_private
    
    Thanx,
    
    Mark
    
    
    
    
                                                                                                                      
                        Brett Glass                                                                                   
                        <brett@lariat        To:     "Jay D. Dyson" <jdysonat_private>, Incidents List            
                        .org>                <incidentsat_private>                                            
                                             cc:     Vuln Dev <vuln-devat_private>                            
                        09/18/2001           Subject:     Re: New "concept" virus/worm?                               
                        09:57 AM                                                                                      
                                                                                                                      
                                                                                                                      
    
    
    
    
    At 10:21 AM 9/18/2001, Jay D. Dyson wrote:
    
    >        It's a two-prong worm.  It appears to be primarily disseminated
    >via e-mail, and then launches its attacks on web hosts upon successful
    >infection.
    
    Newsbytes is calling this worm "Code Rainbow," while some of the antivirus
    firms seem to be calling it "W32.Nimda.A@mm".
    
    Can the e-mail infect anything other than Windows NT/2000? Will it infect
    a system that's running Windows NT/2000 but not IIS? If a Windows 95/98/ME
    user opens it, will his or her system begin to spread the worm as well?
    
    --Brett Glass
    



    This archive was generated by hypermail 2b30 : Tue Sep 18 2001 - 17:55:11 PDT