WARNING: Worm (?) sending from root@microsoft.com to *@anon.lcs.mit.ed

2001-02-08 Thread Sean Reifschneider
Anyone else seeing thousands of messages filling up your queue, apparently from "[EMAIL PROTECTED]" to addresses such as: [EMAIL PROTECTED] Looks like this has started within the hour. Looks like one of our clients got hit with about 6000 of them, and they're still coming in. We're

Re: WARNING: Worm (?) sending from root@microsoft.com to *@anon.lcs.mit.ed

2001-02-08 Thread Aaron L. Meehan
Quoting Sean Reifschneider ([EMAIL PROTECTED]): Anyone else seeing thousands of messages filling up your queue, apparently from "[EMAIL PROTECTED]" to addresses such as: [EMAIL PROTECTED] I'm pretty sure this is the work of the W95.Hybrid email worm (the sexyfun.net one), sending copies

Re: WARNING: Worm (?) sending from root@microsoft.com to *@anon.lcs.mit.ed

2001-02-08 Thread Ricardo Cerqueira
On Thu, Feb 08, 2001 at 05:51:40PM -0700, Sean Reifschneider wrote: Anyone else seeing thousands of messages filling up your queue, apparently from "[EMAIL PROTECTED]" to addresses such as: [EMAIL PROTECTED] Yeap, I've seen that one, but didn't pay much attention to it... I thought it was

Re: WARNING: Worm (?) sending from root@microsoft.com to *@anon.lcs.mit.ed

2001-02-08 Thread Sean Reifschneider
On Thu, Feb 08, 2001 at 05:02:06PM -0800, Aaron L. Meehan wrote: I'm pretty sure this is the work of the W95.Hybrid email worm (the sexyfun.net one), sending copies of itself to the mail2news gateway What triggered the sudden hit then? sexyfun has been around for quite a while and the mail

Re: WARNING: Worm (?) sending from root@microsoft.com to *@anon.lcs.mit.ed

2001-02-08 Thread Roger Merchberger
On or about 06:18 PM 2/8/01 -0700, Sean Reifschneider was caught in a dark alley speaking these words: On Thu, Feb 08, 2001 at 05:02:06PM -0800, Aaron L. Meehan wrote: I'm pretty sure this is the work of the W95.Hybrid email worm (the sexyfun.net one), sending copies of itself to the mail2news