RE: [Full-Disclosure] W32.Netsky-B.worm spreading (name may vary)

From: Randal, Phil (prandal_at_herefordshire.gov.uk)
Date: 02/18/04

  • Next message: Feher Tamas: "[Full-Disclosure] GAYER THAN AIDS ADVISORY #01: IE 5 remote code execution" 
    To: "'fanningp@milwaukee.tec.wi.us'" <fanningp@milwaukee.tec.wi.us>, "'Full Disclosure List'" <full-disclosure@netsys.com>
Date: Wed, 18 Feb 2004 18:11:50 -0000

    We haven't seen a single Bagle.b since 12:37 GMT today. My guess is that
    the infected boxes are now spreading Netsky instead.

    Phil

    ---------------------------------------------
    Phil Randal
    Network Engineer
    Herefordshire Council
    Hereford, UK

    > -----Original Message-----
    > From: full-disclosure-admin@lists.netsys.com
    > [mailto:full-disclosure-admin@lists.netsys.com]On Behalf Of
    > Pete Fanning
    > Sent: 18 February 2004 16:04
    > To: 'Full Disclosure List'
    > Subject: Re: [Full-Disclosure] W32.Netsky-B.worm spreading (name may
    > vary)
    >
    >
    > Maybe I'm paranoid, but after applying DAT 4325 to my
    > Webshield server this morning to catch this new worm I all of
    > a suddon STOPPED catching Bagle.B.
    >
    > Maybe just a coincedence....maybe not.....
    >
    > ---
    > Pete Fanning
    > MATC Technical Services
    > Internet: fanningp@matc.edu
    >
    >
    > >>> Peter Kruse<kruse@krusesecurity.dk> 2/18/2004 7:57:28 AM >>>
    > Hi All,
    >
    > This is a heads up.
    >
    > A small modification of NetSky-A has started spreading in
    > some european
    > countries. Check your favorite AV-vendor for further details.
    >
    > Regards
    > Peter Kruse
    >
    > _______________________________________________
    > Full-Disclosure - We believe in it.
    > Charter: http://lists.netsys.com/full-disclosure-charter.html
    >
    > _______________________________________________
    > Full-Disclosure - We believe in it.
    > Charter: http://lists.netsys.com/full-disclosure-charter.html
    >

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Feher Tamas: "[Full-Disclosure] GAYER THAN AIDS ADVISORY #01: IE 5 remote code execution"