[Full-Disclosure] New variant of Nachi ?

[Awan, Farrukh (OCTO)]

Has any body detected a new variant of the Nachi worm infecting machines not
patched with MS03-039. I couldn't find any details on it propagation except
once a host is infected, it attempts to propagate via SMB over TCP (port
445). Any details on exploit code /payload...



 
Best Regards;
 
Farrukh Awan

(202) -727-8856 (Office)

 

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20031028/cf3e3189/attachment.html