-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hello Screwyluie,
On Tuesday, September 18, 2001 at 14:17:55 -0700, Screwyluie [S] wrote
concerning 'Nimda?':
MDP>> Then TB is immune. It not only doesn't execute attachments in
MDP>> that way, it also tells you either not to or to use extreme
MDP>> caution.
S> true however this program uses a malformed header making windows
S> believe it's a wav file and that it should be executed as such...
But that's just the point. TB! won't execute the attachment unless you
give him the order to do so. If you don't execute the attachment by
hand nothing happens.
S> I see no reason why TB! would be susceptible to it but I thought
S> I'd ask because this one is particularly nasty, and I'm getting
S> reports from my linux group that their win2k servers they admin are
S> being attacked hardcore
S> these aren't the kinda people who use outlook express and they
S> never miss a patch... so it's a little more sneaky then one might
S> think
Then there are two possibilities:
1. They executed the files by hand.
2. They use a OL/OE-like email-clients that executes attachments
automagically.
- --
Best regards,
David
** I'm fascinated by the way memory diffuses fact. **
[TB! 1.54 Beta/8] [Windows NT 5.0 Build 2195 Service Pack 2]
[Running on a Celeron 633@874 256 Mb RAM]
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8ckt Build 06
Comment: PGPKeys: mailto:[EMAIL PROTECTED]?subject=send_PGP_key
iQA/AwUBO6euyFK9yf5+yp9NEQJZqACfYyghuvfeWAJYb/mmp5yVW/AHGwgAnj25
Eab5FZaXEQ4cEY98hQ/R/t4w
=gM9n
-----END PGP SIGNATURE-----
--
______________________________________________________
Archives : http://tbtech.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
Unsubscribe: mailto:[EMAIL PROTECTED]
