[Esd-l] I don't like the looks of this one

[Chris]

> >That looks like the BO-autorun-email-attack portion of Nimda.
>
>In that case, I'm surprised that this is the first one we've
>trapped.

It's hit web servers a lot more (haven't had any email attacks from it yet 
but lots of hits on our web servers).


>BTW, what is "BO-autorun"?

Buffer Overrun, Autorun. So the client can't handle the text and at the end 
a command is placed to run..


-----------------
      Chris Smith
http://www.squiz.net/