Re: New worm?

[ychang1 () GO COM (mick chang)]

Check out for info on the LOVERLETTER worm:

www.zdnet.com/zdnn/stories/news/0,4586,2561671,00.html?
chkpt=zdhpnews01

Mick

-----Original Message-----
From: "Blue Boar"<BlueBoar () THIEVCO COM>
To: VULN-DEV () SECURITYFOCUS COM
Date: Thu May 04 07:07:11 PDT 2000
Subject: New worm?

> I received two copies of this worm-looking thing this
morning.  I don't
> have time to look myself before I head out, but I thought
the list
> might be interested.  The second copy looks like someone
who got it
> themselves and wants to know what it is.
>
> Attached is a zip, and inside it is another zip of the
two files
> wrapped in their original mail headers.. so it should be
pretty
> safe unless you go out of your way to run them.  In which
case,
> caveat subscriber.
>
> It looks like VBScript, and has a .vbs extension, and
diddles
> with reg keys, so I assume it's after windows boxen with
WSH
> installed.
>
>                               BB

___________________________________________________
GO Network Mail
Get Your Free, Private E-mail at http://mail.go.com