| lists.openwall.net | lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 | |
|
Open Source and information security mailing list archives
| ||
|
From: dhopper at ameritech.net (mobly99) Subject: possible MS03-026 worm? Seems to be a possible worm based on the RPC/DCOM exploit making the rounds? puts these files in %systemdrive% rpc.exe rpctest.exe tftpd.exe worm.exe lolx.exe also in %windir%\system32 lolx.exe dcomx.exe rpc.exe and dcomx.exe appear in the running tasks. I pulled samples of them and submitted to SARC. -Dave -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3228 bytes Desc: not available Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030802/a48521f4/smime.bin