Check out this page for more information: http://securityresponse.symantec.com/avcenter/venc/data/w32.nimda.aat_private Thanx, Mark Brett Glass <brett@lariat To: "Jay D. Dyson" <jdysonat_private>, Incidents List .org> <incidentsat_private> cc: Vuln Dev <vuln-devat_private> 09/18/2001 Subject: Re: New "concept" virus/worm? 09:57 AM At 10:21 AM 9/18/2001, Jay D. Dyson wrote: > It's a two-prong worm. It appears to be primarily disseminated >via e-mail, and then launches its attacks on web hosts upon successful >infection. Newsbytes is calling this worm "Code Rainbow," while some of the antivirus firms seem to be calling it "W32.Nimda.A@mm". Can the e-mail infect anything other than Windows NT/2000? Will it infect a system that's running Windows NT/2000 but not IIS? If a Windows 95/98/ME user opens it, will his or her system begin to spread the worm as well? --Brett Glass
This archive was generated by hypermail 2b30 : Tue Sep 18 2001 - 17:55:11 PDT