[ale] [Fwd: Re: a dangerous fast spreading (yet simple) trojanhorse.]

[Geoffrey]

My understanding is, it drops a windows executable on your box, so yes, 
it should only affect windows.

Holmquist, Thomas W. wrote:
> Does this affect only windows?
> 
> -----Original Message-----
> From: Geoffrey [mailto:esoteric at 3times25.net]
> Sent: Monday, October 27, 2003 7:16 PM
> To: ALE
> Subject: [ale] [Fwd: Re: a dangerous fast spreading (yet simple)
> trojanhorse.]
> 
> 
> A couple of folks on securityfocus have made mention of the following 
> new worm variant:
> 
> -------- Original Message --------
> Subject: Re: a dangerous fast spreading (yet simple) trojan horse.
> Date: Mon, 27 Oct 2003 18:30:41 -0400
> From: Craig Holmes <Leusent at absolut.intellihost.ca>
> Reply-To: leusent at link-net.org
> To: bugtraq at securityfocus.com
> References: <000f01c39ced$e5abce50$0900000a at whitestar> 
> <3F9D4B2F.3080903 at scention.de>
> 
> I also noticed this on irc. I grabbed a copy of the file before it was 
> taken
> off line if anyone has any interest in seeing it:
> http://gearbox.gearbolt.net/files/security/cap/britney.jpg
> Note that I have commented out the function call that start the 
> exploitation
> to keep anyone from using my box to spread this virus.
> 
> Craig Holmes

-- 
Until later, Geoffrey	esoteric at 3times25.net

Building secure systems inspite of Microsoft