OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [ISN] 'Love' Worm Spreading Fast

From: Tom Perrine (tepSDSC.EDU)
Date: Thu May 04 2000 - 17:34:01 CDT


-----BEGIN PGP SIGNED MESSAGE-----

We have reports that:

a) Macs can possibly propagate this worm, if certain versions of
Microsoft software have been installed (and installed the VBS
runtime). We have some reports that Macs will forward the text of the
message but not the attachement. We are trying to confirm this in our
lab. Has anyone else seen this? We can't tell yet if this is the
original, or a variant that we haven't seen yet.

b) The worm has mutated. A local site has seen several incoming
copies with "IMISSYOU" and/or "I miss you", etc. Still waiting to get
a copy from them.

c) Numerous sites are being overly-aggressive in their email
filtering. Several ISPs are filtering any messages that contain
"ILOVEYOU" in any part of any header, or even in the body. This is
blocking BUGTRAQ, NTBUGTRAQ, ISN and other messages containing
information about the worm.

- --
Tom E. Perrine (tepSDSC.EDU) | San Diego Supercomputer Center
http://www.sdsc.edu/~tep/ | Voice: +1.858.534.5000

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Processed by Mailcrypt 3.5.4, an Emacs/PGP interface

iQCVAwUBORH60BTSxpWcaAFRAQEq1gP/Y2/2Zia+u3zzWPwVmw94Wp0YubPdvAB7
jwTJEMLVNoiiyBxHiKDTc50Ad+JFG6jY9lNisQmjhUB4Xz+dU8Nm7PR4vbtcUCm8
fgovN630sW2XNjFl6fgs9PiMXf9/iwUkGRJrbzEcUAjYHJn5W2pv0kivm4Eriu8X
iilFI4ktoH0=
=9WOE
-----END PGP SIGNATURE-----

ISN is sponsored by SecurityFocus.com
---
To unsubscribe email LISTSERVSecurityFocus.com with a message body of
"SIGNOFF ISN".