I've receives this worm attack (below without the infectious attachments !) through the jbossCMP mailing list. It tries to execute a .exe, when you preview the message, even if you open no attachment at all... please beware this is a well known worm http:[EMAIL PROTECTED] exploiting a Win32/MIME/IE5.x bug corrected by recent patches like this one http://www.microsoft.com/windows/ie/downloads/critical/q299618/default.asp (windowsupdate.com propose it ) hope this helps... victims spread the worm through mail or IIS... -----Message d'origine----- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Date: mardi 18 septembre 2001 18:20 �: undisclosed-recipients Objet: [JBossCMP] usamplesamplesampledesktopdesktopsamplesampledesktopsamplesamplesamplesample desktopsampledesktopsampledesktopdesktopdesktopsamplesampledesktopdesktopsam plesampledesktopsampledesktopdesktopdesktopdesktopdesktopdesktopdesktopdeskt opdesktopsampled
------------------ Virus Warning Message (on the network) readme.exe is removed from here because it contains a virus. ---------------------------------------------------------
------------------ Virus Warning Message (on the network) Found virus TROJ_NIMDA.A in file readme.exe The file readme.exe is moved to /etc/iscan/virus/virSIAUdKg3_. For more information, please contact [EMAIL PROTECTED] ---------------------------------------------------------
