At 08:11 5-9-01 -0500, you wrote:
>On Tue, 04 Sep 2001 20:11:20 -0400, Clarence Verge wrote:
>
>
>> Hey, I'm more than a little disturbed by the fact that MY NAME
>> was associated with BOTH of those worm distributions.
>
>
>> Who is Oscar Diaz and what has he got against me ?
>
>
>I got three of these worms from Oscar Diaz on Tuesday. The messages
>quoted were all from last winter. My thought was that this stuff
>was harvested from the Arachne archive on the web. Text and our
>email addresses could be easily harvested.
>
>Or maybe there really is an Oscar Diaz with a bunch of old Arachne
>messages in his inbox.
>
>No harm done here because I just run DOS. Annoying though.
>
>
I checked with majordomo and [EMAIL PROTECTED] is still on the recipient
list, so I guess there's no reason to doubt the mcafee description of the
worms way of spreading. The description is in the "MORE BADTRANS!" message
I sent tuesday evening (or wednesday night)
Maybe someone can try the backdoor that the worm is supposed to open....
Bart
BTW, direct mail to [EMAIL PROTECTED] was answered by the worm
immediately, mail through arachne so far not. Maybe majordomo filters it
somehow.
