RE: IIS Worm

["Graham Howe" <graham@xxxxxxx>]

My server has been hit, any idead what to do about it?

Graham

> -----Original Message-----
> From: Mark Hetherington (egroups)
> [mailto:mark.egroups@xxxxxxx]
> Sent: 18 September 2001 21:02
> To: ukha_d@xxxxxxx
> Subject: RE: [ukha_d] IIS Worm
>
>
> A seemingly very prolific one it seems given the huge number of http
> requests my PC is getting. (There is a web server there but
> no tpublished
> and nothing on it) Getting 4+ attempts per incoming IP so
> seems likely to be
> the worm. I have been getting them for a while now but
> tonight has been
> almost constant since logon.
>
> My Norton Internet Security installation has never been so busy :)
>
> Mark.
>
> > -----Original Message-----
> > From: Broadfoot, Kieran J [mailto:Kieran.Broadfoot@xxxxxxx]
> > Sent: 18 September 2001 17:40
> > To: 'ukha_d@xxxxxxx'
> > Subject: [ukha_d] IIS Worm
> >
> >
> >
> > Those of you who need to concern yourselves with these
> kinds of things
> > probably know but for those who dont you might want to shut
> down your IIS
> > servers if you are directly connected to the web right now
> (w32.nimda.amm)
> >
> > There is a rather nasty new worm out and about on a pipe near
you.
> >
> > http://slashdot.org/articles/01/09/18/151203.shtml
> >
> > Thanks
> > 	kieran
> >
> > For more information: http://www.automatedhome.co.uk
> > Post message: ukha_d@xxxxxxx
> > Subscribe:  ukha_d-subscribe@xxxxxxx
> > Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> > List owner:  ukha_d-owner@xxxxxxx
> >
> > Your use of Yahoo! Groups is subject to
> http://docs.yahoo.com/info/terms/
> >
> >
> >
>
>
> For more information: http://www.automatedhome.co.uk
> Post message: ukha_d@xxxxxxx
> Subscribe:  ukha_d-subscribe@xxxxxxx
> Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
> List owner:  ukha_d-owner@xxxxxxx
>
> Your use of Yahoo! Groups is subject to
> http://docs.yahoo.com/info/terms/
>
>
>
>