Este Win32.Hybrys.Worm (W95.Hybrys.Worm)
Amanunte se gasesc la adresele de mai jos:
http://www.kaspersky.com/news.asp?tnews=0&nview=1&id=134&page=0
http://www.datafellows.com/v-descs/hybris.shtml
----- Original Message -----
From: Mircea Mitu <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, January 22, 2001 10:25 PM
Subject: [rlug] worm nou pe la noi
>
> Iata ca wormi apar pe zi ce trece
> Un server pop3 tocmai mi-a furnizat niste astfel de mailuri cu wormi
> Citez de prin headere:
> <quote>
> Received: from name-of-god (menanet21729132227.menanet.net
[217.29.132.227])
> Content-Type: multipart/mixed;
boundary="--VEU3G5MFG9YV4L6N0TIJ0P6301"
> X-UIDL: f4287845d28c1cfe34692ce7400a0c09
> [ Part 2, Application/OCTET-STREAM (Name: "BCAGPIBC.EXE")
31KB. ]
> [ Unable to print this part. ]
> -----asta e primul----
>
> Received: from user (lda125.emirates.net.ae [213.42.22.125])
> Subject: suck!!
> From: famous@serverudemailpop3infectat
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
> boundary="--VEG1UB4XI3KDIJCXQVOX2NCPIR4LINGHUNWD"
> X-UIDL: d0d901fb798bd18983a2a4d6a03418af
>
> orgy Raquel Darian girls!
> orgy!horny
> ----asta a fost al 2lea---
> </quote>
> si primul cica chiar io il trimisesem.
> Incluse in ele sedeau frumos cate un exe.
> Pentru cei ce doresc sa le studieze sunt pe
> http://independent.cyberclub.ro/worm/
> Sunt 2 zipuri cu exe-urile respective (care au si aceasi marime, dar
alt
> nume).
> Poa' sa-mi spuna cineva, daca il recunoaste, care este?
> Si ce sa-i zic celui ce are grija de serveru, in afara ca are
belele?
> Din cate stiu io, are un suse vechi si ma mir ca astia acum mai
cauta
> vulnerabilitati de mult apuse...
---
Send e-mail to '[EMAIL PROTECTED]' with 'unsubscribe rlug' to
unsubscribe from this list.
