[68027] in North American Network Operators' Group
Possibly yet another MS mail worm
daemon@ATHENA.MIT.EDU (Todd Vierling)
Fri Feb 27 19:14:06 2004
Date: Fri, 27 Feb 2004 19:12:42 -0500 (EST)
From: Todd Vierling <tv@duh.org>
To: nanog@merit.edu
Errors-To: owner-nanog-outgoing@merit.edu
This one may be a variant of the recent worms. It's spreading by way of
zipfile attachments. I don't have more info yet, but my $orkplace has just
been hit by it and it's unknown to McAfee and Symantec at this time.
It's not W32.Netsky, as best I can tell, because of the attachment filename:
this one uses things like accabaacc.zip that are new to me. I don't have
more info on it at this time, but will try to snare a sample in transit if
it hits my home system.
Just a heads-up,
--
-- Todd Vierling <tv@duh.org> <tv@pobox.com>
