new worm. I am in brazil and it is attacking our lan intensively. It was received from
somewhere, and is getting fresh addr from (oh, surprise) the outlook addressbook,
disseminating itself.
It multiplies in the client-machine, also in any shared resource INCLUDING SAMBA (ours
is hosted in a HP-UX).
It creates an icon (a small mail-envelop) in any windows desktop, giving itself
some_name.elm. In the background, it manages to replicate itself. 78k multiplied 2000+
times means complete hd exhaustion in short time (including the server-shared
resources).
good luck to all of ours (again).
> [EMAIL PROTECTED] Ron DuFresne <[EMAIL PROTECTED]>Cc:
>[EMAIL PROTECTED]
> Re: New "concept" virus/worm? (fwd)Date: Tue, 18 Sep 2001 13:22:16 -0400
>
>
>I just received it. Here are some MIME headers that might help in
>searching:
>
>
>
>
><HTML><HEAD></HEAD><BODY bgColor=3D#ffffff>
><iframe src=3Dcid:EA4DMGBP9p height=3D0 width=3D0>
></iframe></BODY></HTML>
>--====_ABC0987654321DEF_====--
>
>--====_ABC1234567890DEF_====
>Content-Type: audio/x-wav;
> name="readme.exe"
>Content-Transfer-Encoding: base64
>Content-ID: <EA4DMGBP9p>
>
>TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
>AAAA2AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1v
>ZGUuDQ0KJAAAAAAAAAA11CFvcbVPPHG1TzxxtU88E6pcPHW1TzyZqkU8dbVPPJmqSzxytU88cbVO
>PBG1TzyZqkQ8fbVPPMmzSTxwtU88UmljaHG1TzwAAAAAAAAAAKh+PwEAAAB/UEUAAEwBBQB1Oqc7
>AAAAAAAAAADgAA4BCwEGAABwAAAAYAAAAAAAALN0AAAAEAAAAIAAAAAAFzYAEAAAABAAAAQAAAAA
>
>
>_______________________________________________
>Firewalls mailing list
>[EMAIL PROTECTED]
>http://lists.gnac.net/mailman/listinfo/firewalls
sauda��es,
irado furioso com tudo
linux user 179402
Padre Marcelo Rossi (vulgo O Mala, TeViNaTV) � mosca nova na mesma
mer*�&% de sempre.
por favor, clique aqui: http://www.thehungersite.com
e aqui tamb�m: http://cf6.uol.com.br/umminuto/
------------------------------------------------------------
Nettaxi would like to ask for your help in donations to the RED CROSS today!
http://www.nyredcross.org/donate/
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
