[Dshield] new msblaster on the loose?

Roger W Roberts roger_w_roberts at hotmail.com
Wed Aug 13 23:08:08 GMT 2003


Has anyone caught these, I am stilling running forensics on the first
virus.  Any binaries would be greatly appreciated.  I can send a
professional email offline if necessary.

Roger

-----Original Message-----
From: list-bounces at dshield.org [mailto:list-bounces at dshield.org] On
Behalf Of Craig Shaw
Sent: Wednesday, August 13, 2003 3:24 PM
To: 'General DShield Discussion List'
Subject: RE: [Dshield] new msblaster on the loose?

Looks like it.

Craig Shaw
Systems Administrator
CAA Manitoba
(204) 262-6035
craigs at caamanitoba.com


-----Original Message-----
From: Deb Hale [mailto:haled at pionet.net] 
Sent: 13-Aug-03 14:07
To: 'General DShield Discussion List'
Subject: RE: [Dshield] new msblaster on the loose?

So does this mean there are three?????  Teekids.exe, msblast.exe and
penis32.exe!!!!!

---------------

http://www.theinquirer.net/?article=11018

New version of Blaster worm on the loose
Already

By INQUIRER staff: Wednesday 13 August 2003, 16:51
KASPERSKY LABS claimed this afternoon that there's already a new version
of
the Blaster/Lovesan worm on the loose.

And it says that's likely to mean a repeat of the outbreak we've seen
during
this week. The new variety of Lovesan exploits the same vulnerability.

Kaspersky says that the number of infected systems is around the 300,000
mark, and the new variety may double this number.

"In the worst case, the world community can face a global Internet slow
down
and regional disruption... to the World Wide Web," said Eugene
Kaspersky,
head of the labs.

The new variety uses the name TEEKIDS.EXE instead of MSBLAST.EXE,
different
code compression, and different signatures in the body of the worm. µ





---------------


David Vincent  CNA/MCSE
Network Administrator

www.mightyOaks.com
david.vincent at mightyoaks.com


MIGHTY OAKS WIRELESS SOLUTIONS INC.
209-3347 Oak Street
Victoria, B.C. Canada V8X 1R2 
Phone: 250.386.9398   Fax:  250.386.9399
Pager: 250.380.4575   Cell: 250.884.3000

_______________________________________________
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list



_______________________________________________
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list

_______________________________________________
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list




More information about the list mailing list