[Dshield] Osama email

Paul Marsh pmarsh at nmefdn.org
Fri Apr 23 19:20:13 GMT 2004


After a reboot I found wmplayer.exe over written with 11k file.  NAV
auto-protect and email security have been  successfully nuked as a
result.  NAV with a latest defs detects nothing.  I tested the url on
two systems one was patched with the April patches and the other was
not.  The one with the patches is fine, the one without is the one
infected with who knows what.  

PATCH IT UP............. 




More information about the list mailing list