Re: Code Red

That is totally ridiculous!  I am a Unix Server, and not NT and still got
hit!
----- Original Message -----
From: "Steve Segarra" <ssegarra(at)mitre.org>
To: "Lauren Hanka" <bluejay(at)starband.net>
Cc: "Frank Boumphrey" <bckman(at)ix.netcom.com>; <hwg-basics(at)hwg.org>;
<hwg-techniques(at)hwg.org>
Sent: Tuesday, July 31, 2001 1:59 AM
Subject: Re: Code Red


> ok, I'm covering my face from all of those about to chuck crap at me:
>
> just another example of why microsoft products should not be used in
> applications where security is even a minor concern.
>
> chuck away.
> steve
>
> Lauren Hanka wrote:
> >
> > Well Frank,
> >
> > Who cares if we get in trouble, if it saves someone some misery, it's
worth
> > it. Thanks for the extended info...
> >
> > Lauren
> >
> > ----- Original Message -----
> > From: "Frank Boumphrey" <bckman(at)ix.netcom.com>
> > To: "Lauren Hanka" <bluejay(at)starband.net>; <hwg-basics(at)hwg.org>;
> > <hwg-techniques(at)hwg.org>
> > Sent: Monday, July 30, 2001 6:26 PM
> > Subject: Re: Code Red
> >
> > >
> > > > I may "get in trouble" posting this,
> > >
> > > You probably will, and probably so will I for replying :>)
> > >
> > > I am replying though because there is little solid info on this worm.
> > >
> > > I got infected on July 19th, which shook me a little because
> > > 1. I  take all the precautions against Viruses.
> > > 2. It was a laptop.
> > > 3. My 'right-up-to-the-minute' virus protection did not even know that
I
> > had
> > > been attacked!
> > >
> > > However Code red is not a virus, it attacks Servers, laptops, or
computers
> > > with IIS4 or 5 installed, and it does it directly through your
internet
> > > connection. I got mine through a dial up!
> > >
> > > Note that Virus scanners will neither detect nor 'clean' code red.
> > >
> > > All those of you with Windows 9* or ME on your machines have no
worries:>)
> > >
> > > For those with Windows NT or 2000 on you machines go to
> > > www.microsoft.com/security, and download the patch ASAP. It will take
you
> > > abour 15 minutes, and do it before tomorrow when the next cycle is due
to
> > > start.
> > >
> > > Note also you may not even realize you have been 'hacked' unless you
> > develop
> > > using your intranet, but every time you log on you will attacking 100
> > other
> > > machines!
> > >
> > > Frank
> > > ----- Original Message -----
> > > From: "Lauren Hanka" <bluejay(at)starband.net>
> > > To: <hwg-basics(at)hwg.org>; <hwg-techniques(at)hwg.org>
> > > Sent: Monday, July 30, 2001 4:21 PM
> > > Subject: Code Red
> > >
> > >
> > > > Hi guys,
> > > >
> > > > I may "get in trouble" posting this, but I think this is something
you
> > > > should *all* be aware of. Please read it *now*...
> > > >
> > > > http://www.msnbc.com/news/606910.asp?cp1=1
> > > >
> > > > Take care,
> > > > Lauren
> > > >
> > >
>

HWG hwg-techniques mailing list archives, maintained by Webmasters @ IWA