>>> Jeff <[EMAIL PROTECTED]> 18.09.01 19:54:16 >>>
>I viewed the default web page on a machine known to be infected with Code
>Red II. In doing so, another browser window that appeared to be blank
>popped open, and the address in the title bar the name 'readme.eml'
>appeared. When I viewed the source of the page, this is the code that was
>contained there in-- attached as 'readme.txt' just in case it is malicious
>and would affect others using MS Outlook to read this.
>
>Can anybody tell me what purpose this might serve?
This is not Code red, this is the Nimda Worm. Check the AV Site of your preference for
details
Mit freundlichen Gr��en / Kind Regards
Milan Goellner
Network Technician
----------------------------------------------------------------
Compu-Shack Electronic GmbH
Ringstrasse 56-58
56564 Neuwied
Germany
Telefon +49/(0) 26 31-9 83-962
Email [EMAIL PROTECTED]
http://www.compu-shack.com
