[Esa-l] Yet another worm

John D. Hardin jhardin at impsec.org
Thu Sep 4 14:28:34 PDT 2003


Nothing too special, except the attachment is a program with a .JPG
extension: 

http://securityresponse.symantec.com/avcenter/venc/data/w32.neroma@mm.html

I suggest that you enable Windows Executable poisoning for messages
from the Internet.

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  ...the Fates notice those who buy chainsaws...
                                              -- www.darwinawards.com
-----------------------------------------------------------------------
   62 days until Matrix Revolutions



More information about the esa-l mailing list