Re: Just a quich thought..

From: Pete Sherwood (petersherwood@home.com)
Date: 08/14/01


Message-ID: <02af01c12447$3e9dee20$0d01a8c0@sherwood>
From: "Pete Sherwood" <petersherwood@home.com>
To: "Bruce Kingsbury" <zcat@paradise.net.nz>, <SECURITY-BASICS@securityfocus.com>
Subject: Re: Just a quich thought..
Date: Mon, 13 Aug 2001 18:28:14 -0400


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> Have there been any viruses or worms 'in the wild' in the last six months
> that don't rely on either OE or IIS to propigate? The only two I can think
> of are l1on and ramen.. and I haven't seen a hit from either of those for
> a good long time.

These will propagate via vulnerable shares:

01. W32/Funlove.4099,
02. Worm.ExploreZip
03. W32/QAZ.worm,
04. W32/CTX,
05. W32/Cholera.worm,
06. VBS/Netlog.worm.a,
07. W95/Firkin.worm,
08. PWS-BP,
09. W32/MTX@MM,
10. W32/Msinit (Bymer),
11. W32/XTC@MM,
12. VBS/Sorry.a,
13. VBS/Loveletter.CH@mm,
14. W32/SirCam@MM,
15. W32/Hai.worm.

For starters!

Is that enough to scare the crap-ola out of you?

Once again:

If you aren't scanning for open vulnerable shares on your network we all know of at least 15 that are!!!!

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBO3hUY7omytMtxLfsEQLZ0ACgycwapWEXlp84i5/4PC22jjAxAr8AoOE2
tUC2LEMqWznU9WKeh42cMbFh
=C3WP
-----END PGP SIGNATURE-----