FW: Worm probes

Rob Evans rhe at noc.ten-155.net
Tue Sep 18 15:54:44 UTC 2001


> There is also an email vector where README.EXE is sent via email to
> numerous accounts.  

It also seems to set the from address in both the envelope and
header to an address, possibly from the address book(?).  I've seen
a number of bounces come back to one of our NOC addresses, and a
couple of reports from humans. :(

Rob



More information about the NANOG mailing list