[28530] in North American Network Operators' Group
RE: Virus heads-up
daemon@ATHENA.MIT.EDU (Sykes, Phil)
Fri May 5 05:00:38 2000
Message-ID: <F90097CDF02CD311968E00508B12B0FB1C3E73@DE_MUN_B_E01>
From: "Sykes, Phil" <Phil.Sykes@cweurope.net>
To: nanog@merit.edu
Date: Thu, 4 May 2000 12:28:33 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="windows-1252"
Errors-To: owner-nanog-outgoing@merit.edu
[Sorry about the non-operational content]
I complained at SkyInet.net about two hours ago - they were very responsive
and said they'd pull the offending files immediately.
They seem to have done so.
If anyone wants removal instructions, LMK. Also, if anyone wants a copy of
the .exe for analysis, I have one.
Cheers,
Phil Sykes, Network Engineer
Cable & Wireless Europe
p: +49 89 92699 204 m: +49 172 89 79 727
> -----Original Message-----
> From: Simon Lockhart [mailto:simonl@rd.bbc.co.uk]
> Sent: 04 May 2000 12:18
> To: nanog@merit.edu
> Subject: Virus heads-up
>
>
>
> Heads up on a new virus - ILOVEYOU
>
> I'm sure you've heard about it already, but you may wish to block
> www.skyinet.net (206.101.197.226) at your borders, as that is
> where it
> fetches part of the actual virus code from:
>
> 132.185.x.y - - [04/May/2000:10:23:14 +0100] "GET
> http://www.skyinet.net/~y
> oung1s/HJKhjnwerhjkxcvytwertnMTFwetrdsfmhPnjw6587345gvsdf7679n
> jbvYT/WIN-BUG
> SFIX.exe HTTP/1.0"
>
> Other than that, it looks like just another Melissa.
>
> Simon
> --
> Simon Lockhart | Tel: +44 (0)1737 839676
> Internet Engineering Manager | Fax: +44 (0)1737 839516
> BBC Internet Services | Email:
> Simon.Lockhart@bbc.co.uk
> Kingswood Warren,Tadworth,Surrey,UK | URL:
> http://support.bbc.co.uk/
>
>
>
