RE: OT: It can be a new virus?

["Keith Doxey" <ukha@xxxxxxx>]

There is a new variant of W32/Sobig doing the rounds at the moment.

It comes with a ZIP file attached. I got sent a copy today but obviously
didnt open it.

More info at http://vil.nai.com/vil/content/v_100429.htm

Keith

www.diyha.co.uk
www.kat5.tv


> -----Original Message-----
> From: Dan [mailto:dtoma@xxxxxxx]
> Sent: 26 June 2003 18:46
> To: ukha_d@xxxxxxx
> Subject: Re: [ukha_d] OT: It can be a new virus?
>
>
> Hi Scott,
>
> Just to make an idea, the number of "attacks" from the last
> two days is more
> than 100!!! bigger than last week.
>
> Dan
>
> ----- Original Message -----
> From: "Scott Ewing" <scott.ewing@xxxxxxx>
> To: <ukha_d@xxxxxxx>
> Sent: Thursday, June 26, 2003 8:36 PM
> Subject: RE: [ukha_d] OT: It can be a new virus?
>
>
> > People have been scanning netbios ports on peoples
> computers like this
> > for years, I think the increased frequency might just be
> because of more
> > people getting on line, and thingking there some kind of hacker
:)
> >
> > You don't happen to have a static ip address do you?
> >
> > Scott
> >
> > -----Original Message-----
> > From: Dan [mailto:dtoma@xxxxxxx]
> > Sent: Thursday, June 26, 2003 6:25 PM
> > To: ukha_d@xxxxxxx
> > Subject: Re: [ukha_d] OT: It can be a new virus?
> >
> >
> > Hi Steven,
> >
> > I have NETBIOS port scan from all over the world, not from my
> > neighbours. And it is vissible that they are a lot lot more
> than usual
> > port scans. Sometimes they are more than 10 per minute, from
totally
> > different IP addresses
> >
> > They are reported by ISS BlackIce.
> >
> > BR,
> > Dan
> >
> > ----- Original Message -----
> > From: "Steven Edgar" <yahoogroups@xxxxxxx>
> > To: <ukha_d@xxxxxxx>
> > Sent: Thursday, June 26, 2003 7:57 PM
> > Subject: Re: [ukha_d] OT: It can be a new virus?
> >
> >
> > >
> > > > In the last two days I have received a lot of
"NETBIOS
> Port probe"
> > > > on my computer directly connected to the Internet. It
> is something
> > > > like tens
> > per
> > > > hour.
> > > >
> > > > It can be a new virus?
> > > > Anyone else have seen this on his own computer?
> > >
> > >
> > > Not me, just the usual pointless portscans in my logs for
> the last few
> > days.
> > >
> > > There are a few stories about "mysterious traffic"
on the
> net for the
> > > last couple of weeks from a worm the experts reckon is on
> the loose,
> > > but didn't see any mention of netbios.
> > >
> > > I assume you are on a shared (ADSL, cable modem) uplink
> of some type,
> > > so I would guess one of your neighbours is doing
> something funny. Does
> >
> > > the
> > source
> > > of the "Netbios port probe" look like its coming
from the
> same subnet
> > > as
> > you?
> > >
> > > Steven
> > >
> > >
> > > ** UKHA2004 BE THERE! ** - start planning now.
> > >
> > > http://www.automatedhome.co.uk
> > > Post message: ukha_d@xxxxxxx
> > > Subscribe:  ukha_d-subscribe@xxxxxxx
> > > Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> > > List owner:  ukha_d-owner@xxxxxxx
> > >
> > > Your use of Yahoo! Groups is subject to
> > > http://docs.yahoo.com/info/terms/
> > >
> > >
> > >
> >
> >
> >
> >
> > ** UKHA2004 BE THERE! ** - start planning now.
> >
> > http://www.automatedhome.co.uk
> > Post message: ukha_d@xxxxxxx
> > Subscribe:  ukha_d-subscribe@xxxxxxx
> > Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> > List owner:  ukha_d-owner@xxxxxxx
> >
> > Your use of Yahoo! Groups is subject to
> > http://docs.yahoo.com/info/terms/
> >
> >
> >
> >
> >
> >
> > ** UKHA2004 BE THERE! ** - start planning now.
> >
> > http://www.automatedhome.co.uk
> > Post message: ukha_d@xxxxxxx
> > Subscribe:  ukha_d-subscribe@xxxxxxx
> > Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> > List owner:  ukha_d-owner@xxxxxxx
> >
> > Your use of Yahoo! Groups is subject to
> http://docs.yahoo.com/info/terms/
> >
> >
> >
>
>
>
> ------------------------ Yahoo! Groups Sponsor
> ---------------------~-->
> Get A Free Psychic Reading! Your Online Answer To Life's
> Important Questions.
> http://us.click.yahoo.com/Lj3uPC/Me7FAA/ySSFAA/IBOolB/TM
> --------------------------------------------------------------
> -------~->
>
> ** UKHA2004 BE THERE! ** - start planning now.
>
> http://www.automatedhome.co.uk
> Post message: ukha_d@xxxxxxx
> Subscribe:  ukha_d-subscribe@xxxxxxx
> Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> List owner:  ukha_d-owner@xxxxxxx
>
> Your use of Yahoo! Groups is subject to
> http://docs.yahoo.com/info/terms/
>