Two items: SANS has issued a "code red" warning over a rapidly spreading worm that attacks IIS machines and then tries to force them into participating in a Distributed Denial of Service (DDoS) attack against whitehouse.gov. The speed of the infection has been so unusual that the Internet's INFOCON threat status has gone up to YELLOW. If you run an IIS server, get the hot patch from Microsoft and install it ASAP. The patch is at http://www.microsoft.com/technet/security/bulletin/MS01-033.asp. The other bit of virus news is about the W32/SirCam@MM virus. Since I received 3 of these viruses yesterday (from different GIS oriented list subscribers, i.e. "people I know"), I think we here should stay alert. Here's McAfee's take on it: McAfee.com has seen a large and growing number of consumer computers infected with W32/SirCam@MM. This is a HIGH RISK VIRUS FOR CONSUMERS. The infected email can come from addresses that you recognize. Attached is a file with two different extensions. The file name itself varies. For detection and removal instructions for the Sir Cam Virus, click here. -> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2371 The email message can appear as follows: Subject: [filename (random)] Body: [content varies] Hi! How are you? I send you this file in order to have your advice or I hope you can help me with this file that I send or I hope you like the file that I sendo you or This is the file with the information that you ask for See you later. Thanks --- the same message may be received in Spanish --- Hola como estas ? Te mando este archivo para que me des tu punto de vista or Espero me puedas ayudar con el archivo que te mando or Espero te guste este archivo que te mando or Este es el archivo con la informaci�n que me pediste Nos vemos pronto, gracias. -- - Bill Thoen ------------------------------------------------------------ GISnet, 1401 Walnut St., Suite C, Boulder, CO 80302 tel: 303-786-9961, fax: 303-443-4856 mailto:[EMAIL PROTECTED], http://www.ctmap.com/gisnet ------------------------------------------------------------ _______________________________________________________________________ List hosting provided by Directions Magazine | www.directionsmag.com | To unsubscribe, send e-mail to [EMAIL PROTECTED] and put "unsubscribe MapInfo-L" in the message body.
