March 22 Alerts

[zigar]

W32.Cervivec.A@mm
Discovered on: March 22, 2002

W32.Cervivec.A@mm is a mass-mailing worm that is written in Delphi. The worm is packed with a known runtime compression program. When executed, the worm attempts to find email addresses belonging to contacts in the ICQ contact list, and then to send email to them
http://sarc.com/avcenter/venc/data/w32.cervivec.a@mm.html

Wild: Low
Damage: Low
Distribution: Medium



VBS.Hart@mm
Discovered on: March 21, 2002
This VBS worm spreads by sending itself to all addresses in the Microsoft Outlook address book. It also copies itself to all local or mapped network drives, and spreads through mIRC.
Type: Worm
Infection Length: 11,980 bytes
Threat Assessment:
Wild: Low
Damage: Low
Distribution: High

http://sarc.com/avcenter/venc/data/vbs.hart@mm.html

[gstudios]

Spreads through mIRC? I assume they mean after it has infected your machine, it then tries to dcc itself to everyone with an onjoin command or something?

[s0nIc]

hmmm very common tactics i say.. i always get that kind of attack on Austnet and other popular IRC networks..