Its not your fault, Im nosy 8) I did let it dl the .eml file but as to how
I got all those and such was wierd.. They even migrated to samba shares(and
winboxes) somehow. I visited one page (206.230.156.209) with I.E. and closed
all open window imdeiately then trie dwith konquerer figured Id be safe.
however i found (400 not 4000) on my linuxbox and exactly 198 on each winbox
that was up at the time. both had infected load.exe in windows/system/ and
then a *.eml in every folder on the box...
truly wierd..
On Thursday 20 September 2001 13:26, you wrote:
> Wow, sorry. I have not had that kind of trouble. I did find that Opera
> tried to DL the .eml file. Never had any .eml or .nws files grow on my
> box. I really dont understand how that many .eml and .nws files could get
> to your box unless it was some type of javascript problem where it looped
> for some reason.
>
> On Thursday 20 September 2001 10:54, Bill Day wrote:
> > Hell dont do it with any box.. I have been cleaning out *.eml and *.nws
> > files for hours
> >
> > There were some 4000 eml files in just my home directory around 600 nws
> >
> > for a while I couldnt get my kde2 desktop to run.. i could log in it
> > would load up then my screen would go blank.. dont know why.. something
> > was trying to start kwrite and such
> >
> > so I logged in as root for a short time find all files *.eml *.nws and
> > deleted them seem to be ok now...
> >
> > <snip>
> >
> > > > On Wednesday 19 September 2001 16:59, you wrote:
> > > > > Dont do this with a win box!
> > > > >
> > > > > Go here. read the page source. Note the javascript
> > > > > http://208.163.77.109
> > > > >
> > > > > then get
> > > > > http://208.163.77.109/readme.eml
> > > > >
> > > > > is this what the virus does on its own or is this site setup to
> > > > > infect on purpose?
--
Bill Day A.K.A. BadMan
RLU#188133 RLM#83358 http://counter.li.org
irc.openprojects.net #linux-users
MicroShaft is the only company that introduces
an OS that is worse than the one it replaces.
<--------------------------------------------------->
5:30pm up 50 days, 7:45, 25 users, load average: 0.00, 0.01, 0.05
_______________________________________________
http://linux.nf -- [EMAIL PROTECTED]
Archives, Subscribe, Unsubscribe, Digest, Etc
->http://linux.nf/mailman/listinfo/linux-users
