[Snort-users] Code Green???
hostmaster at ...2310...
Tue Sep 18 11:48:02 EDT 2001
I'm seeing entries in our IIS logs for the requests (cmd.exe, root.exe, etc)
but no emails or downloads of the readme.exe file from our servers....does
that sound normal. As far as I can see I have us patched for the sec. rollup
and the previous unicode......
From: Ian Cudlip [mailto:ian at ...3488...]
Sent: Tuesday, September 18, 2001 1:56 PM
To: Steve Halligan; 'richard'; snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Code Green???
I've had it infect machines patched for code red, but not patched with the
On Tuesday 18 September 2001 5:34 pm, Steve Halligan wrote:
> > This infected our previously patched for code red, winnt and win2k
> > systems.. One of them i even fixed yesterday and put Microsofts
> > CodeRedCleanup tool on it. It is placing the root.exe file on the hard
> > drive.
> Can anyone verify that this is infecting IIS server patched to current
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:
More information about the Snort-users