Worm/Virus alert

This is a useful and helpful spam.... well worth it, thanks for the heads up... Curt ----- Original Message ----- From: "Marion Bates" <Marion.Bates(a)dartmouth.edu> To: <classiccmp(a)classiccmp.org> Sent: Tuesday, September 18, 2001 1:11 PM Subject: Worm/Virus alert figured you folks might want to know to watch out for a new Code Red-esque worm that's running rampant...below is from SlashDot. http://slashdot.org/articles/01/09/18/151203.shtml boxes with many different exploits (including what looks like an attempt to exploit boxes still rooted by Code Red). It looks like each IP tries 16 attempts on its neighbors. There is also a new mail worm mailing WAV files or something with bits of what appears to be the registry... it may or may not be related. Got any words on this? Shut down those windows boxes and stop opening attachments. And make that 21. Got another one while writing this story. All my hits are coming from 208.n.n.n (where I am) I'm sure it'll keep moving to nearby boxes. ..%c1%1c../winnt/system32/cmd.exe?/c+dir attack. In only 4 minutes. Also of interest, My desktop has now been hit about 500 times today, all from 208.x.x.x IPs. This might be really bad. I still haven't read anything about this anywhere else, so you heard it here first ;) "readme.eml" to all web pages served... and due to a bug in IE5, it will automatically execute the file! Yay Internet Explorer!