Re: New Worm

Article View: demon.security

Article #62

#62

From: Simon Waters
Date: Tue, 18 Sep 2001 23:07

13 lines
1690 bytes

Pete Harrison wrote:
> 
> One of our (patched) machines was broken into. It is now isolated. I shall
> have a good look at it tomorrow. Among other things, it seems to be able to
> add users and shares if you reset the box so watch your step. it is not a
> memory ony beast like code red.

http://www.sarc.com/avcenter/venc/data/w32.nimda.a@mm.html

Thanks, seems the antivirus guys have caught up.

This has the potential to be bad, update all those virus
scanners ASAP.

Technical Details

Message-ID: <3BA7D3A8.235720FB@wretched.demon.co.uk>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!sn-xit-02!supernews.com!news.tele.dk!small.news.tele.dk!195.158.233.21!news1.ebone.net!news.ebone.net!diablo.netcom.net.uk!netcom.net.uk!dispose.news.demon.net!news.demon.co.uk!demon!wretched.demon.co.uk!not-for-mail

References: <3BA772DA.7EC35A31@wretched.demon.co.uk> <1000838703.9312.0.nnrp-14.9e981284@news.demon.co.uk>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 1065b6,70e3cba6f93eb2a1
X-Google-Attributes: gid1065b6,public
X-Google-ArrivalTime: 2001-09-18 16:08:01 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!sn-xit-02!supernews.com!news.tele.dk!small.news.tele.dk!195.158.233.21!news1.ebone.net!news.ebone.net!diablo.netcom.net.uk!netcom.net.uk!dispose.news.demon.net!news.demon.co.uk!demon!wretched.demon.co.uk!not-for-mail
From: Simon Waters <Simon@wretched.demon.co.uk>
Newsgroups: demon.security
Subject: Re: New Worm
Date: Wed, 19 Sep 2001 00:07:20 +0100
Organization: Eighth Layer Limited
Message-ID: <3BA7D3A8.235720FB@wretched.demon.co.uk>
References: <3BA772DA.7EC35A31@wretched.demon.co.uk> <1000838703.9312.0.nnrp-14.9e981284@news.demon.co.uk>
NNTP-Posting-Host: wretched.demon.co.uk
X-NNTP-Posting-Host: wretched.demon.co.uk:193.237.109.203
X-Trace: news.demon.co.uk 1000854443 nnrp-12:14089 NO-IDENT wretched.demon.co.uk:193.237.109.203
X-Complaints-To: abuse@demon.net
X-Mailer: Mozilla 4.76 [en] (X11; U; Linux 2.2.19 i686)
X-Accept-Language: en-GB, en-US, en
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 13

Reply to Parent Message