[Snort-users] Code Green???

Tim Parker hostmaster at ...2310...
Tue Sep 18 11:48:02 EDT 2001


I'm seeing entries in our IIS logs for the requests (cmd.exe, root.exe, etc)
but no emails or downloads of the readme.exe file from our servers....does
that sound normal. As far as I can see I have us patched for the sec. rollup
and the previous unicode......

-----Original Message-----
From: Ian Cudlip [mailto:ian at ...3488...]
Sent: Tuesday, September 18, 2001 1:56 PM
To: Steve Halligan; 'richard'; snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Code Green???


I've had it infect machines patched for code red, but not patched with the
ms 
sec. roll-up.

Ian.

On Tuesday 18 September 2001  5:34 pm, Steve Halligan wrote:
> > This infected our previously patched for code red, winnt and win2k
> > systems.. One of them i even fixed yesterday and put Microsofts
> > CodeRedCleanup tool on it. It is placing the root.exe file on the hard
> > drive.
>
> Can anyone verify that this is infecting IIS server patched to current
> levels?
>
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list