Re: W32.Nimda.A
From: Bill Sanderson (Bill_Sanderson_at_msn.com.plugh.org)
Date: 11/10/03
- Next message: Bill Sanderson: "Re: W32.Nimda.A"
- Previous message: Bill Sanderson: "Re: Apparent Infected IIS/Proxy Server"
- In reply to: info_at_veugelers.nl: "W32.Nimda.A"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 10 Nov 2003 16:56:19 -0500
The ISP of the system involved, which may be either infected, or under the
control of a trojan.
It isn't perfectly clear to me who to contact on this one, but this outfit
may be the right one:
"info@veugelers.nl" <anonymous@discussions.microsoft.com> wrote in message
news:02cb01c3a7d0$98b068c0$a401280a@phx.gbl...
this site 80.161.14.7 attacks my internetserver almost
every day whit this log
GET, /scripts/..Á../winnt/system32/cmd.exe, /c+dir,
If you try to open de website it will attack you with the
W32.Nimda.A
Who can stop this?
- Next message: Bill Sanderson: "Re: W32.Nimda.A"
- Previous message: Bill Sanderson: "Re: Apparent Infected IIS/Proxy Server"
- In reply to: info_at_veugelers.nl: "W32.Nimda.A"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|