Re: [Full-Disclosure] Anybody know what Sobig.F has downloaded?

[Michael Renzmann <security@dylanic.de>]

Hi.

Tim Fletcher wrote:
> While this is 2nd hand I have now heard about the same effect on 2
> different unrelated machines via friends on quakenet (irc)
> 
> <Mikeh> email from a m8
> <Mikeh> got a bit of a prob
> <Mikeh> with me pc, when i go online, after about a minute i get a
> message saying
> <Mikeh> "system is shutting down please save all work inj progress and
> log off,
> <Mikeh> system shut down was initiated by NT Authority/system.

Sounds more like one of the other RPC/DCOM worms... I guess this is not 
directly related with Sobig.

Bye, Mike

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html