[21755] in bugtraq
RE: "Code Red" worm - there MUST be at least two versions.
daemon@ATHENA.MIT.EDU (Kuo, Jimmy)
Fri Jul 20 18:27:08 2001
Message-ID: <C99EFEE03D87D411AB67001083F9DD4614E44D@BEA-82-216.nai.com>
From: "Kuo, Jimmy" <Jimmy_Kuo@nai.com>
To: bugtraq@securityfocus.com
Date: Fri, 20 Jul 2001 14:39:24 -0700
MIME-Version: 1.0
Content-Type: text/plain
> I wonder if I have seen this variant - a person I emailed has a
>server whose web pages served looks a lot like the Code Red worm's output
>(1 line of simple html) displaying
> FUCK CHINA GOVERNENT
More likely, USA Government.
> and p0isonb0x (or something like that)
and PoizonBOx
From Sadmind worm.
http://vil.nai.com/vil/virusSummary.asp?virus_k=99085
(named BoxPoison)
Jimmy
jkuo@nai.com
