Re: WARNING: Worm (?) sending from root@microsoft.com to *@anon.lcs.mit.ed

2001-02-08 Thread Roger Merchberger
On or about 06:18 PM 2/8/01 -0700, Sean Reifschneider was caught in a dark alley speaking these words: >On Thu, Feb 08, 2001 at 05:02:06PM -0800, Aaron L. Meehan wrote: >>I'm pretty sure this is the work of the W95.Hybrid email worm (the >>sexyfun.net one), sending copies of itself to the mail2new

Re: WARNING: Worm (?) sending from root@microsoft.com to *@anon.lcs.mit.ed

2001-02-08 Thread Sean Reifschneider
On Thu, Feb 08, 2001 at 05:02:06PM -0800, Aaron L. Meehan wrote: >I'm pretty sure this is the work of the W95.Hybrid email worm (the >sexyfun.net one), sending copies of itself to the mail2news gateway What triggered the sudden hit then? sexyfun has been around for quite a while and the mail ser

Re: WARNING: Worm (?) sending from root@microsoft.com to *@anon.lcs.mit.ed

2001-02-08 Thread Ricardo Cerqueira
On Thu, Feb 08, 2001 at 05:51:40PM -0700, Sean Reifschneider wrote: > Anyone else seeing thousands of messages filling up your queue, apparently > from "[EMAIL PROTECTED]" to addresses such as: > >[EMAIL PROTECTED] Yeap, I've seen that one, but didn't pay much attention to it... I thought it

Re: WARNING: Worm (?) sending from root@microsoft.com to *@anon.lcs.mit.ed

2001-02-08 Thread Aaron L. Meehan
Quoting Sean Reifschneider ([EMAIL PROTECTED]): > Anyone else seeing thousands of messages filling up your queue, apparently > from "[EMAIL PROTECTED]" to addresses such as: > >[EMAIL PROTECTED] I'm pretty sure this is the work of the W95.Hybrid email worm (the sexyfun.net one), sending copi

WARNING: Worm (?) sending from root@microsoft.com to *@anon.lcs.mit.ed

2001-02-08 Thread Sean Reifschneider
Anyone else seeing thousands of messages filling up your queue, apparently from "[EMAIL PROTECTED]" to addresses such as: [EMAIL PROTECTED] Looks like this has started within the hour. Looks like one of our clients got hit with about 6000 of them, and they're still coming in. We're currentl