[ale] [Fwd: Re: a dangerous fast spreading (yet simple) trojan horse.]

[Geoffrey]

A couple of folks on securityfocus have made mention of the following 
new worm variant:

-------- Original Message --------
Subject: Re: a dangerous fast spreading (yet simple) trojan horse.
Date: Mon, 27 Oct 2003 18:30:41 -0400
From: Craig Holmes <Leusent at absolut.intellihost.ca>
Reply-To: leusent at link-net.org
To: bugtraq at securityfocus.com
References: <000f01c39ced$e5abce50$0900000a at whitestar> 
<3F9D4B2F.3080903 at scention.de>

I also noticed this on irc. I grabbed a copy of the file before it was 
taken
off line if anyone has any interest in seeing it:
http://gearbox.gearbolt.net/files/security/cap/britney.jpg
Note that I have commented out the function call that start the 
exploitation
to keep anyone from using my box to spread this virus.

Craig Holmes
-- 
KMail: 1.5.3
Linux Weltall.gearbolt.net 2.4.20 #4 Sat Sep 27 18:55:34 EDT 2003 i686 AMD
Athlon(TM) XP 1800+ AuthenticAMD GNU/Linux



-- 
Until later, Geoffrey	esoteric at 3times25.net

Building secure systems inspite of Microsoft