[Dshield] FriendGreetings Worm is back

Coxe, John B. JOHN.B.COXE at saic.com
Wed Oct 30 19:01:42 GMT 2002

Apparently, the URL used for downloads by the worm has become active again.
There are also reports that the downloaded file now has been modified to
circumvent antivirus detection.  FYI, if you are not blocking the source and
depend on A/V protection.

More information about the list mailing list