nanog mailing list archives
Re: FW: Worm probes
From: Rob Evans <rhe () noc ten-155 net>
Date: Tue, 18 Sep 2001 16:54:44 +0100
There is also an email vector where README.EXE is sent via email to numerous accounts.
It also seems to set the from address in both the envelope and header to an address, possibly from the address book(?). I've seen a number of bounces come back to one of our NOC addresses, and a couple of reports from humans. :( Rob
Current thread:
- Re: Re[2]: Worm probes, (continued)
- Re: Re[2]: Worm probes Nick Thompson (Sep 18)
- Re: Re[2]: Worm probes Rafi Sadowsky (Sep 18)
- Re: Worm probes Jeff Gehlbach (Sep 18)
- RE: Worm probes Don Lundquist (Sep 18)
- RE: Worm probes Smith, Rick (Sep 18)
- Re: Worm probes Ulf Zimmermann (Sep 18)
- Re: Worm probes Jared Mauch (Sep 18)
- Re: Worm probes sigma (Sep 18)
- Re: Worm probes Ulf Zimmermann (Sep 18)
- RE: Worm probes Los, Ralph (Sep 18)
- FW: Worm probes Braun, Mike (Sep 18)
- Re: FW: Worm probes Rob Evans (Sep 18)
- Re: FW: Worm probes Jim Olsen (Sep 18)
- RE: Worm probes Roeland Meyer (Sep 18)
- Re: Worm probes Jim Mercer (Sep 18)
- FW: Re: Worm probes Roeland Meyer (Sep 18)
- Re: Worm Probes Roeland Meyer (Sep 18)
- Re: Worm Probes Bill Becker (Sep 18)
- Re: Worm Probes Bill Larson (Sep 18)
- Re: Worm Probes Mark Kent (Sep 18)
- Re: Worm Probes Bill Becker (Sep 18)