[<prev] [next>] [day] [month] [year] [list]
Message-ID: <F1D82290F689D411923A00A0C9ACA76F02C6AC2B@pyis400.it.alstom.com.au>
Date: Tue, 27 Jan 2004 11:38:04 +1100
From: Kane Lightowler <kane.lightowler@...alstom.com.au>
To: "'Gadi Evron'" <ge@...tistical.reprehensible.net>,
bugtraq@...urityfocus.com, full-disclosure@...ts.netsys.com
Subject: RE: outbreak update
Yes it is alot of naming confustion
Trend is detecting this as the MIMAIL.R
Mcafee As Mydoom
Symantec as Novarg
CA as Shmig
Propogates via SMTP & Kazaa
Also it starts up 63 threads all requesting the index page of
www.sco.com every 300 milliseconds.
Kane
-----Original Message-----
From: Gadi Evron [mailto:ge@...tistical.reprehensible.net]
Sent: Tuesday, 27 January 2004 10:06 AM
To: bugtraq@...urityfocus.com; full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] outbreak update
Confirmed - just a name confusion.
This is the same worm.
It seems to possibly be a new mimail variants so Trend probably had the
name right.
Network slowdown is already being felt.
Gadi Evron
The Trojan Horses Research Mailing List - http://ecompute.org/th-list
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
_____________________________________________________________________
CONFIDENTIALITY: This e-mail and any attachments are confidential and may be privileged. If you are not a named recipient,please notify the sender immediately and do not disclose the contents to another person, use it for any purpose or store or copy the information in any medium.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Powered by blists - more mailing lists