[NCLUG] Mailman wins again!

MEDBERRY,DAVID (HP-Loveland,ex1) david_medberry at hp.com
Thu Jan 18 08:39:06 MST 2001


Hybris virus--er, actually worm.

Infects WIN32 DLL tcp implementation to start replying to all senders with a
similar message. Receives updates via news protocol (and from a website that
has long since been shutdown.) It actually went critical (or some such
jargon) around Thanksgiving last year as it really started to cause a lot of
corporate headaches....

-d

sexyfun.net was the "sender" of the e-mail

-----Original Message-----
From: Matt Clauson [mailto:mec at dotorg.org]
Sent: Wednesday, January 17, 2001 9:35 PM
To: nclug at nclug.org
Subject: Re: [NCLUG] Mailman wins again!


On Wed, Jan 17, 2001 at 09:18:28PM -0700, Matt Taggart wrote:
> Mailman is cool. It's built-in spam catcher feature just stopped some
porno 
> spam from hitting the list("Message has implicit destination").
> 
> If people on the list would prefer to receive these messages ("Snowhite
and 
> the Seven Dwarfs - The REAL story!") let me know and I can turn it off :)

On an interesting side note, this appears to be a possible virus -- my
virus scanner on the mailserver has been catching a metric buttload of
those messages -- I don't have one handy, so I can't say why -- soon as I
see it again, I'll post it.

--mec

_______________________________________________
NCLUG mailing list
NCLUG at nclug.org
http://www.nclug.org/mailman/listinfo/nclug



More information about the NCLUG mailing list