incidents 2001/09
By Thread

Starting: Sun Sep 02 2001 - 02:14:50 PDT
Ending: Mon Oct 01 2001 - 08:45:46 PDT

• Re: Strange debug output (HTTP) Mark Lastdrager (Sat Sep 01 2001 - 11:04:28 PDT)
• Re: Strange entries in Apache access_log //Stany (Sat Sep 01 2001 - 11:24:07 PDT)
  • Re: Strange entries in Apache access_log Sven Koch (Sat Sep 01 2001 - 12:42:33 PDT)
  • Re: Strange entries in Apache access_log Ben Ford (Sat Sep 01 2001 - 14:12:34 PDT)
• formmail Soeren Ziehe (Sat Sep 01 2001 - 14:50:00 PDT)
  • Re: formmail Jay D. Dyson (Sun Sep 02 2001 - 02:42:34 PDT)
  • Re: formmail dewt (Sun Sep 02 2001 - 07:26:58 PDT)
  • Re: formmail Ryan Russell (Sun Sep 02 2001 - 13:44:58 PDT)
• Re: Code Red - A Possible Origin? Michael J. Cannon (Sat Sep 01 2001 - 14:36:59 PDT)
  • Re: Code Red - A Possible Origin? H C (Sat Sep 01 2001 - 13:50:45 PDT)
• Re: Win32.Invalid.A@mm Nick FitzGerald (Sat Sep 01 2001 - 16:20:38 PDT)
• FW: Wierd .ida request? What is it? red0x (Sun Sep 02 2001 - 10:42:22 PDT)
  • Re: FW: Wierd .ida request? What is it? Johannes Segitz (Sun Sep 02 2001 - 14:23:36 PDT)
  • RE: FW: Wierd .ida request? What is it? red0x (Mon Sep 03 2001 - 18:23:26 PDT)
    • RE: FW: Wierd .ida request? What is it? Can Erkin Acar (Mon Sep 03 2001 - 18:47:00 PDT)
• Scan of the Month - September Lance Spitzner (Sun Sep 02 2001 - 23:04:24 PDT)
• Question Hill, James (Tue Sep 04 2001 - 08:10:00 PDT)
  • RE: Question McCammon, Keith (Tue Sep 04 2001 - 08:34:31 PDT)
  • Re: Question jnf (Tue Sep 04 2001 - 08:49:28 PDT)
• Lengthy probes of port 8500 Paul Gear (Wed Sep 05 2001 - 00:51:12 PDT)
  • Re: Lengthy probes of port 8500 Soeren Ziehe (Thu Sep 06 2001 - 03:25:00 PDT)
• New Linux Trojan Qualys Inc (Wed Sep 05 2001 - 13:12:53 PDT)
  • Re: New Linux Trojan Ben Ford (Wed Sep 05 2001 - 13:57:12 PDT)
    • Re: New Linux Trojan Russell Fulton (Wed Sep 05 2001 - 14:26:01 PDT)
      • Re: New Linux Trojan Jason Robertson (Wed Sep 05 2001 - 15:15:08 PDT)
    • Re: New Linux Trojan Gary Flynn (Thu Sep 06 2001 - 07:43:32 PDT)
  • RE: New Linux Trojan Vidovic,Zvonimir,VEVEY,GL-IS/CIS (Thu Sep 06 2001 - 06:01:02 PDT)
  • Re: New Linux Trojan Brett Glass (Thu Sep 06 2001 - 09:03:26 PDT)
  • Re: New Linux Trojan Nick FitzGerald (Sat Sep 08 2001 - 16:56:15 PDT)
• Code red variants? Russell Fulton (Wed Sep 05 2001 - 16:14:18 PDT)
  • Re: Code red variants? Matthew Collins (Thu Sep 06 2001 - 02:49:20 PDT)
    • Re: Code red variants? Russell Fulton (Thu Sep 06 2001 - 14:28:06 PDT)
  • RE: Code red variants? Korkmaz, Murat (Wed Sep 05 2001 - 18:06:36 PDT)
• Strange traffic auto230111at_private (Wed Sep 05 2001 - 17:22:23 PDT)
  • Re: Strange traffic Jens Hektor (Wed Sep 05 2001 - 23:06:14 PDT)
  • Re: Strange traffic Todd Ransom (Thu Sep 06 2001 - 06:49:40 PDT)
• New variant of Magistr virus discovered LynnMCraat_private (Thu Sep 06 2001 - 10:39:14 PDT)
  • Re: New variant of Magistr virus discovered Berislav Kucan (Fri Sep 07 2001 - 04:40:32 PDT)
• WebDAV Propfind? Anyone? McCammon, Keith (Fri Sep 07 2001 - 11:45:44 PDT)
  • RE: WebDAV Propfind? Anyone? Frank Knobbe (Fri Sep 07 2001 - 15:19:02 PDT)
  • RE: WebDAV Propfind? Anyone? McCammon, Keith (Sat Sep 08 2001 - 09:38:18 PDT)
    • Re: RE: WebDAV Propfind? Anyone? Floris Meester (Sat Sep 08 2001 - 05:14:56 PDT)
  • Re: WebDAV Propfind? Anyone? Todd Ransom (Mon Sep 10 2001 - 07:44:49 PDT)
• x.c worm analysis Ryan Russell (Fri Sep 07 2001 - 12:47:06 PDT)
• Recent Increase in Port 139 Activity John Campbell (Fri Sep 07 2001 - 12:52:55 PDT)
  • Re: Recent Increase in Port 139 Activity Harlan S. Barney, Jr. (Fri Sep 07 2001 - 14:34:06 PDT)
    • code red attacks and real-time blackhole'ng Florian Piekert (Fri Sep 07 2001 - 16:46:56 PDT)
      • Re: code red attacks and real-time blackhole'ng red0x (Fri Sep 07 2001 - 22:30:18 PDT)
      • RE: code red attacks and real-time blackhole'ng NESTING, DAVID M (SBCSI) (Mon Sep 10 2001 - 08:29:09 PDT)
      • Re: code red attacks and real-time blackhole'ng Sean Hunter (Fri Sep 14 2001 - 00:23:26 PDT)
    • Re: Recent Increase in Port 139 Activity maggieat_private (Fri Sep 07 2001 - 16:58:29 PDT)
  • RE: Recent Increase in Port 139 Activity Frank Knobbe (Fri Sep 07 2001 - 15:22:42 PDT)
  • RE: Recent Increase in Port 139 Activity John Campbell (Fri Sep 07 2001 - 16:34:10 PDT)
  • Re: Recent Increase in Port 139 Activity H C (Sun Sep 09 2001 - 13:07:07 PDT)
  • RE: Recent Increase in Port 139 Activity John Campbell (Mon Sep 10 2001 - 09:32:02 PDT)
• code red to ftp? Kevin Holmquist (Sat Sep 08 2001 - 11:37:03 PDT)
• update: port 139 traffic Kevin Holmquist (Sat Sep 08 2001 - 11:44:58 PDT)
• Remote Shell Trojan: Threat, Origin and the Solution kai takashi (Sun Sep 09 2001 - 04:40:27 PDT)
  • Remote Shell Trojan: Threat, Origin and the Solution kai takashi (Sun Sep 09 2001 - 04:40:27 PDT)
  • Re: Remote Shell Trojan: Threat, Origin and the Solution Nick FitzGerald (Sun Sep 09 2001 - 15:47:16 PDT)
  • RE: Remote Shell Trojan: Threat, Origin and the Solution John Stauffacher (Mon Sep 10 2001 - 08:25:43 PDT)
    • RE: Remote Shell Trojan: Threat, Origin and the Solution Matt Block (Mon Sep 10 2001 - 11:31:34 PDT)
      • RE: Remote Shell Trojan: Threat, Origin and the Solution Jonathan Rickman (Mon Sep 10 2001 - 13:46:41 PDT)
  • Re: Remote Shell Trojan: Threat, Origin and the Solution Kevin Gagel (Mon Sep 10 2001 - 08:34:01 PDT)
    • Re: Remote Shell Trojan: Threat, Origin and the Solution Patrick Andry (Mon Sep 10 2001 - 10:38:40 PDT)
• Pretty stealthy SSH scanning seen on the Internet. Erik Fichtner (Sun Sep 09 2001 - 11:40:36 PDT)
  • Re: Pretty stealthy SSH scanning seen on the Internet. Dug Song (Sun Sep 09 2001 - 18:15:38 PDT)
  • Re: Pretty stealthy SSH scanning seen on the Internet. Andreas Östling (Mon Sep 10 2001 - 03:55:58 PDT)
  • Re: Pretty stealthy SSH scanning seen on the Internet. Kent Engström (Mon Sep 10 2001 - 03:23:21 PDT)
  • Re: Pretty stealthy SSH scanning seen on the Internet. dove (Mon Sep 10 2001 - 03:55:09 PDT)
  • Re: Pretty stealthy SSH scanning seen on the Internet. Crist J. Clark (Mon Sep 10 2001 - 19:41:45 PDT)
• strange codered2-like request buschermannat_private (Mon Sep 10 2001 - 05:30:33 PDT)
  • Re: strange codered2-like request Nick FitzGerald (Mon Sep 10 2001 - 13:45:50 PDT)
• Contact for McDonnell Douglas Corporation (NET-MDC-NET) Russell Fulton (Mon Sep 10 2001 - 14:54:15 PDT)
  • RE: similar problems to (NET-MDC-NET) fuzzz (Mon Sep 10 2001 - 17:19:41 PDT)
  • Re: Contact for McDonnell Douglas Corporation (NET-MDC-NET) Russell Fulton (Mon Sep 10 2001 - 17:08:40 PDT)
  • Re: Contact for McDonnell Douglas Corporation (NET-MDC-NET) Kath (Mon Sep 10 2001 - 17:09:52 PDT)
• Guess the tool... Portnoy, Gary (Tue Sep 11 2001 - 05:47:07 PDT)
  • Re: Guess the tool... H C (Tue Sep 11 2001 - 09:07:22 PDT)
  • Re: Guess the tool... Paul Gear (Tue Sep 11 2001 - 12:27:09 PDT)
  • RE: Guess the tool... Portnoy, Gary (Wed Sep 12 2001 - 05:18:54 PDT)
• Terroristic attacks today Rich Puhek (Tue Sep 11 2001 - 12:45:16 PDT)
  • RE: Terroristic attacks today Pitcher, Glenn (Tue Sep 11 2001 - 12:54:09 PDT)
  • RE: Terroristic attacks today Brad Bemis (Tue Sep 11 2001 - 12:54:33 PDT)
  • Re: Terroristic attacks today Johannes B. Ullrich (Tue Sep 11 2001 - 12:56:54 PDT)
  • Re: Terroristic attacks today Geoff Galitz (Tue Sep 11 2001 - 13:04:45 PDT)
  • Re: Terroristic attacks today Alvin Oga (Tue Sep 11 2001 - 13:08:11 PDT)
  • Re: Terroristic attacks today Joe Shaw (Tue Sep 11 2001 - 13:16:40 PDT)
  • Re: Terroristic attacks today Shoten (Tue Sep 11 2001 - 13:03:43 PDT)
  • RE: Terroristic attacks today Vachon, Scott (Tue Sep 11 2001 - 13:39:13 PDT)
  • Re: Terroristic attacks today Boss (Tue Sep 11 2001 - 14:01:38 PDT)
    • RE: Terroristic attacks today david debrouwere (Wed Sep 12 2001 - 05:57:58 PDT)
      • RE: Terroristic attacks today Ben N. Venzke (Wed Sep 12 2001 - 09:44:15 PDT)
      • Re: Terroristic attacks today James Puckett (Wed Sep 12 2001 - 10:28:56 PDT)
• DMCA Strikes again red0x (Tue Sep 11 2001 - 12:45:35 PDT)
• RE: Terrorist attacks today Richard.Grantat_private (Tue Sep 11 2001 - 13:04:44 PDT)
• Middle East Attacks John (Tue Sep 11 2001 - 18:20:12 PDT)
• Any one seen any evidence of "Code Blue?" Michael Katz (Tue Sep 11 2001 - 19:18:39 PDT)
  • Re: Any one seen any evidence of "Code Blue?" Yaakov Yehudi (Wed Sep 12 2001 - 05:02:49 PDT)
  • Re: Any one seen any evidence of "Code Blue?" Nick FitzGerald (Wed Sep 12 2001 - 01:41:38 PDT)
    • Re: Any one seen any evidence of "Code Blue?" H C (Wed Sep 12 2001 - 11:23:55 PDT)
      • Concept Virus / Nimda Gary Warner (Tue Sep 18 2001 - 11:37:04 PDT)
      • RE: Concept Virus / Nimda Grab Raham (Tue Sep 18 2001 - 21:02:33 PDT)
  • Re: Any one seen any evidence of "Code Blue?" Pedro Miller Rabinovitch (Wed Sep 12 2001 - 08:58:16 PDT)
  • RE: Any one seen any evidence of "Code Blue?" Patrick Belcher, Monitored Security (Wed Sep 12 2001 - 09:35:17 PDT)
• Information site Ken Pfeil (Tue Sep 11 2001 - 17:24:38 PDT)
• Warning & Indicators - Cyber Conflict Ben N. Venzke (Wed Sep 12 2001 - 11:10:21 PDT)
• Possible new trojan? Mike Blomgren (Thu Sep 13 2001 - 02:45:26 PDT)
  • Re: Possible new trojan? H C (Thu Sep 13 2001 - 10:20:59 PDT)
  • Re: Possible new trojan? Mike Blomgren (Thu Sep 13 2001 - 11:39:54 PDT)
    • Re: Possible new trojan? Daniel Martin (Mon Sep 17 2001 - 06:57:42 PDT)
  • RE: Possible new trojan? Ryan Hill (Fri Sep 14 2001 - 16:50:31 PDT)
• Time.com security contact? bugtraq (Thu Sep 13 2001 - 10:13:05 PDT)
  • Re: Time.com security contact? Jay D. Dyson (Thu Sep 13 2001 - 14:24:33 PDT)
• Run a mail host with a public MX record? Seeing large numbers of bounces? Andrew van der Stock (Thu Sep 13 2001 - 19:29:09 PDT)
  • Re: Run a mail host with a public MX record? Seeing large numbers of bounces? Richie B. (Fri Sep 14 2001 - 01:50:04 PDT)
  • Re: Run a mail host with a public MX record? Seeing large numbers of bounces? Sean Hunter (Fri Sep 14 2001 - 02:19:51 PDT)
    • Re: Run a mail host with a public MX record? Seeing large numbers of bounces? Sean Hunter (Sat Sep 15 2001 - 04:32:31 PDT)
      • Workaround for (RE: Run a mail host with a public MX record? Seeing large numbers of bounces?) Andrew van der Stock (Sun Sep 16 2001 - 16:46:51 PDT)
• Red Cross Fraud Firehose (Sat Sep 15 2001 - 19:28:43 PDT)
  • Re: Red Cross Fraud Akatosh (Sun Sep 16 2001 - 11:32:48 PDT)
    • RE: Red Cross Fraud Brian Morin (Sun Sep 16 2001 - 16:45:48 PDT)
• Ping Scan Frank Knobbe (Sun Sep 16 2001 - 21:51:53 PDT)
  • RE: Ping Scan Tulchinskiy, Sasha (Mon Sep 17 2001 - 06:28:36 PDT)
  • RE: Ping Scan Frank Knobbe (Mon Sep 17 2001 - 06:52:09 PDT)
    • RE: Ping Scan Fernando Cardoso (Mon Sep 17 2001 - 08:55:06 PDT)
  • RE: Ping Scan Fernando Cardoso (Mon Sep 17 2001 - 01:32:11 PDT)
  • RE: Ping Scan Ofir Arkin (Mon Sep 17 2001 - 10:25:21 PDT)
• Re: Incident Response Yuri Demchenko (Mon Sep 17 2001 - 02:48:59 PDT)
• Active defense gets serious: Announcing LaBrea 2.0 Tom Liston (Mon Sep 17 2001 - 10:42:34 PDT)
• CodeBlue finally hitting, or what? Portnoy, Gary (Tue Sep 18 2001 - 07:24:00 PDT)
  • Re: CodeBlue finally hitting, or what? Eric Jacobsen (Tue Sep 18 2001 - 08:26:24 PDT)
  • Re: CodeBlue finally hitting, or what? Jason Giglio (Tue Sep 18 2001 - 08:36:35 PDT)
  • Re: CodeBlue finally hitting, or what? Jason Giglio (Tue Sep 18 2001 - 08:36:35 PDT)
  • Re: CodeBlue finally hitting, or what? Tracey Losco (Tue Sep 18 2001 - 08:39:15 PDT)
  • RE: CodeBlue finally hitting, or what? Becky Pinkard (Tue Sep 18 2001 - 15:29:22 PDT)
  • Re: CodeBlue finally hitting, or what? Nick FitzGerald (Tue Sep 18 2001 - 15:33:45 PDT)
• More complete log - looks viral to me... Fred Cohen (Tue Sep 18 2001 - 07:25:12 PDT)
• New worm ?? Cory McIntire (Tue Sep 18 2001 - 07:51:01 PDT)
  • Re: New worm ?? Pedro Miller Rabinovitch (Tue Sep 18 2001 - 08:32:59 PDT)
  • Re: New worm ?? Jay D. Dyson (Tue Sep 18 2001 - 09:14:47 PDT)
  • RE: New worm ?? Olivier DEMBOUR (Tue Sep 18 2001 - 08:31:00 PDT)
• Concept Virus(CV) V.5 - Advisory and Quick analysis Olle Segerdahl (Tue Sep 18 2001 - 07:47:00 PDT)
  • Re: Concept Virus(CV) V.5 - Advisory and Quick analysis Dave Sill (Tue Sep 18 2001 - 07:45:16 PDT)
  • Concept Virus(CV) V.5 - Quick analysis update Olle Segerdahl (Tue Sep 18 2001 - 08:58:39 PDT)
    • A suggestion to Concept/Nimda analysts Stuart Staniford (Tue Sep 18 2001 - 11:04:31 PDT)
    • Re: Concept Virus(CV) V.5 - Quick analysis update Brian Pomeroy (Tue Sep 18 2001 - 11:24:05 PDT)
      • Re: Concept Virus(CV) V.5 - Quick analysis update Homer Wilson Smith (Tue Sep 18 2001 - 17:05:50 PDT)
      • Re: Concept Virus(CV) V.5 - Quick analysis update Michael H. Warfield (Tue Sep 18 2001 - 18:46:19 PDT)
  • RE: Concept Virus(CV) V.5 - Advisory and Quick analysis Mark Challender (Tue Sep 18 2001 - 09:57:19 PDT)
  • RE: Concept Virus(CV) V.5 - Advisory and Quick analysis Mark Challender (Tue Sep 18 2001 - 10:50:33 PDT)
  • Re: Concept Virus(CV) V.5 - Advisory and Quick analysis Dave Sill (Tue Sep 18 2001 - 11:13:00 PDT)
  • RE: Concept Virus(CV) V.5 - Advisory and Quick analysis Robert Nieuwhof (Tue Sep 18 2001 - 14:00:36 PDT)
  • Re: Concept Virus(CV) V.5 - Advisory and Quick analysis Jose Nazario (Tue Sep 18 2001 - 14:43:40 PDT)
    • Re: Concept Virus(CV) V.5 - Advisory and Quick analysis Michael H. Warfield (Tue Sep 18 2001 - 18:10:58 PDT)
  • RE: Concept Virus(CV) V.5 - Advisory and Quick analysis Davis, Matt (Wed Sep 19 2001 - 05:01:46 PDT)
• New worm? 'readme.eml' Pedro Miller Rabinovitch (Tue Sep 18 2001 - 08:11:38 PDT)
  • Re: New worm? 'readme.eml' Christopher X. Candreva (Tue Sep 18 2001 - 08:46:48 PDT)
    • Re: New worm? 'readme.eml' Tony Abedini (Tue Sep 18 2001 - 11:56:22 PDT)
  • Re: New worm? 'readme.eml' coopat_private (Tue Sep 18 2001 - 08:47:32 PDT)
  • RE: New worm? 'readme.eml' Mark Ng (Tue Sep 18 2001 - 08:51:00 PDT)
• XdesktopdesktopdesktoNew email based virus - first one just arrived here... Fred Cohen (Tue Sep 18 2001 - 07:29:31 PDT)
• NIPC Advisory 01-021, "Potential DDoS Attacks" VanMeter, John (Tue Sep 18 2001 - 03:12:50 PDT)
• Possible new worm using directory traversal vulnerability? thomas lakofski (Tue Sep 18 2001 - 07:13:14 PDT)
• Some brief details on new worm E. Larry Lidz (Tue Sep 18 2001 - 08:34:19 PDT)
• command execution attempts Keith.Morgan (Tue Sep 18 2001 - 06:59:23 PDT)
• Interesting Scan--Looks like a new worm. Steve Halligan (Tue Sep 18 2001 - 07:13:56 PDT)
• Massive CMD.EXE and ROOT.EXE scan Tulchinskiy, Sasha (Tue Sep 18 2001 - 06:54:59 PDT)
• New Worm or Attack VanMeter, John (Tue Sep 18 2001 - 09:31:11 PDT)
• Rekindled sploit scanning? Aj Effin Reznor (Tue Sep 18 2001 - 07:08:04 PDT)
• Re: New "concept" virus/worm? Berislav Kucan (Tue Sep 18 2001 - 10:26:10 PDT)
  • Re: New "concept" virus/worm? Jim Olsen (Tue Sep 18 2001 - 11:01:51 PDT)
    • Re: New "concept" virus/worm? Bernie Cosell (Tue Sep 18 2001 - 13:13:22 PDT)
    • MIME type of readme.eml (was Re: New "concept" virus/worm? Rob Quinn (Tue Sep 18 2001 - 22:25:20 PDT)
      • Re: MIME type of readme.eml (was Re: New "concept" virus/worm? Henrik Pedersen (Tue Sep 18 2001 - 23:21:47 PDT)
  • Re: New "concept" virus/worm? Jim (Tue Sep 18 2001 - 20:12:37 PDT)
• Website automating download of readme.eml Sean Kelly (Tue Sep 18 2001 - 09:17:58 PDT)
• massive cmd.exe and root.exe attempts Patrick Beam (Tue Sep 18 2001 - 10:05:55 PDT)
  • Re: massive cmd.exe and root.exe attempts Sean Kelly (Tue Sep 18 2001 - 11:22:35 PDT)
    • Re: massive cmd.exe and root.exe attempts screamer (Tue Sep 18 2001 - 13:51:09 PDT)
• Some more details on the worm Davis, Matt (Tue Sep 18 2001 - 09:44:07 PDT)
  • Re: [unisog] Some more details on the worm Gary Flynn (Tue Sep 18 2001 - 12:57:30 PDT)
  • RE: Some more details on the worm Steiner, Michael (Tue Sep 18 2001 - 11:47:36 PDT)
  • Re: [unisog] Some more details on the worm Jeffrey Altman (Tue Sep 18 2001 - 17:54:51 PDT)
• Fwd: Massive CMD.EXE and ROOT.EXE scan Florian Piekert (Tue Sep 18 2001 - 10:44:33 PDT)
  • Re: Fwd: Massive CMD.EXE and ROOT.EXE scan John Q. Public (Tue Sep 18 2001 - 11:51:35 PDT)
• is this new Don Weber (Tue Sep 18 2001 - 10:44:54 PDT)
• nimda tries to send mail after reboot John Q. Public (Tue Sep 18 2001 - 11:41:21 PDT)
  • Re: nimda tries to send mail after reboot John Q. Public (Tue Sep 18 2001 - 12:32:01 PDT)
    • Re: nimda tries to send mail after reboot Paul Seaman (Tue Sep 18 2001 - 14:57:09 PDT)
  • Re: nimda tries to send mail after reboot Brett Glass (Tue Sep 18 2001 - 15:40:08 PDT)
    • Re: nimda tries to send mail after reboot John Q. Public (Tue Sep 18 2001 - 15:52:49 PDT)
    • RE: nimda tries to send mail after reboot Don Weber (Tue Sep 18 2001 - 18:29:51 PDT)
      • RE: nimda tries to send mail after reboot Jim Forster (Tue Sep 18 2001 - 19:47:20 PDT)
  • Re: nimda tries to send mail after reboot Brett Glass (Wed Sep 19 2001 - 10:13:30 PDT)
    • RE: nimda tries to send mail after reboot Lists (Wed Sep 19 2001 - 12:40:38 PDT)
    • Re: nimda tries to send mail after reboot Michael H. Warfield (Wed Sep 19 2001 - 14:22:00 PDT)
  • RE: nimda tries to send mail after reboot Andrew Mulholland (Wed Sep 19 2001 - 10:24:39 PDT)
• New worm behavior ? Owen Creger (Tue Sep 18 2001 - 12:04:33 PDT)
  • SV: New worm behavior ? Peter Kruse (Tue Sep 18 2001 - 12:28:30 PDT)
  • New worm behavior ? Owen Creger (Tue Sep 18 2001 - 13:07:08 PDT)
• Explorer Dr. Watsons Chris Thornberry (Tue Sep 18 2001 - 12:32:26 PDT)
  • Re: Explorer Dr. Watsons FYOM (Tue Sep 18 2001 - 13:00:28 PDT)
  • RE: Explorer Dr. Watsons James Paterson (Tue Sep 18 2001 - 12:57:16 PDT)
  • Re: Explorer Dr. Watsons Jeremy 'Circ' Charles (Tue Sep 18 2001 - 13:07:21 PDT)
  • RE: Explorer Dr. Watsons Steve Halligan (Tue Sep 18 2001 - 12:56:42 PDT)
  • RE: Explorer Dr. Watsons Arnold, Jamie (Tue Sep 18 2001 - 16:28:08 PDT)
• Nimda Worm Alert Jensenne Roculan (Tue Sep 18 2001 - 11:08:31 PDT)
  • Nimda Worm Alert Jensenne Roculan (Tue Sep 18 2001 - 11:08:31 PDT)
  • Re: Nimda Worm Sam Ferrell (Wed Sep 19 2001 - 09:31:05 PDT)
• RE: New "concept" virus/worm? Ronny Vaningh (Tue Sep 18 2001 - 09:50:22 PDT)
  • RE: New "concept" virus/worm? Christian Hampson (Tue Sep 18 2001 - 11:29:09 PDT)
    • RE: New "concept" virus/worm? Tina Bird (Tue Sep 18 2001 - 12:50:46 PDT)
  • RE: New "concept" virus/worm? Joseph P Frazee (Tue Sep 18 2001 - 13:05:08 PDT)
  • RE: New "concept" virus/worm? Tom Smit (Tue Sep 18 2001 - 15:27:53 PDT)
• New worm segfaults apache bugtraq (Tue Sep 18 2001 - 08:37:11 PDT)
  • Re: New worm segfaults apache Chip McClure (Tue Sep 18 2001 - 14:46:00 PDT)
    • Re: New worm segfaults apache hanz@inter-tel.net (Tue Sep 18 2001 - 17:15:02 PDT)
      • RE: New worm segfaults apache robhat_private (Tue Sep 18 2001 - 18:04:54 PDT)
    • Re: New worm segfaults apache Chris Hardie (Tue Sep 18 2001 - 16:14:26 PDT)
      • Re: New worm segfaults apache Sean Chittenden (Wed Sep 19 2001 - 02:23:17 PDT)
  • RE: New worm segfaults apache Chris Arnold (Tue Sep 18 2001 - 14:37:24 PDT)
  • Re: New worm segfaults apache bugtraq (Wed Sep 19 2001 - 01:41:22 PDT)
    • Re: New worm segfaults apache Marc Slemko (Thu Sep 20 2001 - 21:12:05 PDT)
• test for browser vulnerability oncemyway (Tue Sep 18 2001 - 13:17:38 PDT)
• Nimda Probes Stopped Jason Giglio (Tue Sep 18 2001 - 11:49:23 PDT)
  • Re: Nimda Probes Stopped Stuart Staniford (Tue Sep 18 2001 - 15:46:33 PDT)
  • RE: Nimda Probes Stopped Andrew Blevins (Tue Sep 18 2001 - 15:36:42 PDT)
    • RE: Nimda Probes Stopped Jonathan Rickman (Tue Sep 18 2001 - 19:02:41 PDT)
  • Nimda mostly infects /8-locally. Thomas Roessler (Tue Sep 18 2001 - 17:09:31 PDT)
    • Re: Nimda mostly infects /8-locally. Bryan Andersen (Tue Sep 18 2001 - 20:40:47 PDT)
  • Re: Nimda Probes Stopped Stuart Staniford (Tue Sep 18 2001 - 17:36:26 PDT)
  • RE: Nimda Probes Stopped Robert Nieuwhof (Wed Sep 19 2001 - 07:55:12 PDT)
  • RE: Nimda Probes Stopped Jeff Peterson (Wed Sep 19 2001 - 11:12:21 PDT)
• NIMDA has a built in timer? No hits lately David Kennedy CISSP (Tue Sep 18 2001 - 14:37:59 PDT)
  • Re: NIMDA has a built in timer? No hits lately Sevo Stille (Tue Sep 18 2001 - 16:56:42 PDT)
    • Re: NIMDA has a built in timer? No hits lately Mike Baptiste (Tue Sep 18 2001 - 18:33:14 PDT)
  • Re: NIMDA has a built in timer? No hits lately Paul Gear (Tue Sep 18 2001 - 16:13:17 PDT)
• W32.Nimda.A@mm Worm Behavior Owen Creger (Tue Sep 18 2001 - 13:17:15 PDT)
• McAffee and Removal for W32/Nimda@MM? Chris Thornberry (Tue Sep 18 2001 - 13:41:14 PDT)
  • RE: McAffee and Removal for W32/Nimda@MM? William Holmberg (Tue Sep 18 2001 - 16:04:39 PDT)
• possible early worm vector? Greg Broiles (Tue Sep 18 2001 - 14:25:56 PDT)
• Nimda.amm: anecdotal symptoms Justin Hahn (Tue Sep 18 2001 - 10:55:12 PDT)
• WORM FORENSICS? Technical Support (Tue Sep 18 2001 - 13:24:32 PDT)
  • Re: WORM FORENSICS? Gabriel Wachman (Tue Sep 18 2001 - 17:26:07 PDT)
• Curious AV behavior wrt Nimda kawaii (Tue Sep 18 2001 - 12:30:27 PDT)
• Nimda Worm Mitigation John Davidson (Tue Sep 18 2001 - 16:56:13 PDT)
  • RE: Nimda Worm Mitigation Jason Lewis (Tue Sep 18 2001 - 19:52:33 PDT)
    • RE: Nimda Worm Mitigation: Snort Kain X (Tue Sep 18 2001 - 23:26:11 PDT)
  • FW: Nimda Worm Mitigation Jason Lewis (Wed Sep 19 2001 - 19:32:54 PDT)
    • Apache rewrite rules and error msgs & Nimda Chris Stephens (Wed Sep 19 2001 - 20:57:58 PDT)
• Upgrading IE detects Nimda ? Sean Kelly (Tue Sep 18 2001 - 15:35:12 PDT)
• Superkay.com:888 Richard Bradford (Tue Sep 18 2001 - 16:44:07 PDT)
  • Re: Superkay.com:888 sanghun (Tue Sep 18 2001 - 19:52:47 PDT)
  • RE: Superkay.com:888 Dave Hart (Tue Sep 18 2001 - 19:58:01 PDT)
• Re(2): Nimda Probes Stopped Ken Eichman (Tue Sep 18 2001 - 16:14:22 PDT)
• Our sumary of the NIMDA (CV) worm Bob Todd (Tue Sep 18 2001 - 18:28:26 PDT)
• riched20.dll aleph1at_private (Tue Sep 18 2001 - 21:17:31 PDT)
• Nimda and samba, chap II (20010531?) Chip Mefford (Tue Sep 18 2001 - 21:21:02 PDT)
  • Re: Nimda and samba, chap II (20010531?) Kris Carlier (Wed Sep 19 2001 - 05:34:55 PDT)
• W32.Nimda Infecting Executables !!!! :-( Owen Creger (Tue Sep 18 2001 - 20:01:36 PDT)
  • RE: W32.Nimda Infecting Executables !!!! :-( Steve Halligan (Wed Sep 19 2001 - 07:56:58 PDT)
  • RE: W32.Nimda Infecting Executables !!!! :-( Royans Tharakan (Wed Sep 19 2001 - 09:26:42 PDT)
• Corrupted IE with nimda virus Chris Thornberry (Tue Sep 18 2001 - 20:20:04 PDT)
• W32.Nimda disassembly/analysis vitalyat_private (Wed Sep 19 2001 - 01:45:54 PDT)
• Nimda - Local Privilege escalation? ross_bushbyat_private (Wed Sep 19 2001 - 05:23:50 PDT)
• New worm attacking MS DNS servers? Sean Kelly (Wed Sep 19 2001 - 03:50:48 PDT)
  • RE: New worm attacking MS DNS servers? Tony Mason (Wed Sep 19 2001 - 11:08:14 PDT)
• Nimda repair problems Steve Cody (Wed Sep 19 2001 - 08:04:40 PDT)
  • RE: Nimda repair problems Tom Smit (Wed Sep 19 2001 - 09:42:32 PDT)
• Nimda - collected information Berislav Kucan (Wed Sep 19 2001 - 06:14:00 PDT)
• Nimda infecting executables Johannes Verelst (Wed Sep 19 2001 - 06:28:30 PDT)
  • Re: Nimda infecting executables Gokulnath (Wed Sep 19 2001 - 09:10:06 PDT)
• nimda modem activity? George Bakos (Wed Sep 19 2001 - 08:49:11 PDT)
• Nimda affecting Linux? George Taylor (Wed Sep 19 2001 - 08:24:38 PDT)
• RE: Anyone????? FW: Concept Virus(CV) V.5 - Quick analysis update George Milliken (Wed Sep 19 2001 - 06:59:10 PDT)
  • RE: Anyone????? FW: Concept Virus(CV) V.5 - Quick analysis update Michael Halls (Wed Sep 19 2001 - 13:21:20 PDT)
    • RE: Nimda Apache RedirectMatch results David Leitko (Wed Sep 19 2001 - 16:31:53 PDT)
• Microsoft advisory John Ellingsworth (Wed Sep 19 2001 - 08:52:30 PDT)
• concept virus Burak DAYIOGLU (Wed Sep 19 2001 - 05:25:13 PDT)
• RE: Web site infected by Nimda Jac Engel (Wed Sep 19 2001 - 10:07:22 PDT)
  • RE: Web site infected by Nimda Ken Pfeil (Wed Sep 19 2001 - 10:44:31 PDT)
  • RE: Web site infected by Nimda John Q. Public (Wed Sep 19 2001 - 10:25:24 PDT)
    • Re: MIME type of readme.eml (was Re: Web site infected by Nimda Rob Quinn (Wed Sep 19 2001 - 12:52:03 PDT)
      • Re: MIME type of readme.eml (was Re: Web site infected by Nimda Nick FitzGerald (Wed Sep 19 2001 - 17:56:08 PDT)
      • Re: MIME type of readme.eml (was Re: Web site infected by Nimda Rob Quinn (Thu Sep 20 2001 - 10:22:01 PDT)
• RE: Nimda Worm Sam Ferrell (Wed Sep 19 2001 - 11:54:33 PDT)
• Nimda Poison Pill Blaine Kubesh (Wed Sep 19 2001 - 12:26:17 PDT)
  • Re: Nimda Poison Pill Thorat_private (Wed Sep 19 2001 - 13:27:01 PDT)
• Nimda Probes by Hour Bryan Andersen (Wed Sep 19 2001 - 12:48:33 PDT)
• Please tell me I'm wrong: microsoft.com infected Steve Cody (Wed Sep 19 2001 - 12:37:39 PDT)
  • Re: Please tell me I'm wrong: microsoft.com infected Benjamin Franz (Wed Sep 19 2001 - 15:01:32 PDT)
  • Re: Please tell me I'm wrong: microsoft.com infected Rodrigo Goya (Wed Sep 19 2001 - 13:59:25 PDT)
    • Re: Please tell me I'm wrong: microsoft.com infected Nick FitzGerald (Wed Sep 19 2001 - 15:31:51 PDT)
      • Re: Please tell me I'm wrong: microsoft.com infected Johannes Verelst (Wed Sep 19 2001 - 15:49:50 PDT)
  • RE: Please tell me I'm wrong: microsoft.com infected Brian Morin (Wed Sep 19 2001 - 14:55:20 PDT)
  • Re: Please tell me I'm wrong: microsoft.com infected Michael H. Warfield (Wed Sep 19 2001 - 14:54:03 PDT)
  • Re: Please tell me I'm wrong: microsoft.com infected Jay D. Dyson (Wed Sep 19 2001 - 15:02:43 PDT)
  • RE: Please tell me I'm wrong: microsoft.com infected jmillerat_private (Wed Sep 19 2001 - 15:13:39 PDT)
    • Re: Please tell me I'm wrong: microsoft.com infected Rodrigo Goya (Wed Sep 19 2001 - 14:31:02 PDT)
  • RE: Please tell me I'm wrong: microsoft.com infected Ken Pfeil (Wed Sep 19 2001 - 15:27:51 PDT)
  • RE: Please tell me I'm wrong: microsoft.com infected jmillerat_private (Wed Sep 19 2001 - 15:28:25 PDT)
  • Re: Please tell me I'm wrong: microsoft.com infected Jon Zobrist (Wed Sep 19 2001 - 15:17:25 PDT)
  • RE: Please tell me I'm wrong: microsoft.com infected Craig Humphrey (Wed Sep 19 2001 - 15:22:34 PDT)
  • RE: Please tell me I'm wrong: microsoft.com infected Boyan Krosnov (Wed Sep 19 2001 - 15:53:38 PDT)
  • RE: Please tell me I'm wrong: microsoft.com infected Dave Hart (Wed Sep 19 2001 - 16:08:11 PDT)
  • RE: Please tell me I'm wrong: microsoft.com infected David LeBlanc (Wed Sep 19 2001 - 20:07:15 PDT)
• Mutex Thorat_private (Wed Sep 19 2001 - 16:34:00 PDT)
• Recovery documentation Tina Bird (Wed Sep 19 2001 - 19:15:57 PDT)
• Detailed Nimda Analysis Report Jensenne Roculan (Wed Sep 19 2001 - 23:33:29 PDT)
• Concept Virus/Nimda sendmail-filter. Jonas Stahre (Wed Sep 19 2001 - 23:32:50 PDT)
• Loopback traffic on the net Sven Carstens (Thu Sep 20 2001 - 03:50:01 PDT)
• MS denys Nimda infection John Conover (Thu Sep 20 2001 - 02:56:34 PDT)
• nimda subject line Thomas Roessler (Thu Sep 20 2001 - 01:38:09 PDT)
  • Re: nimda subject line Thomas Roessler (Thu Sep 20 2001 - 01:44:07 PDT)
  • Re: nimda subject line Eric Chien (Fri Sep 21 2001 - 13:13:07 PDT)
• [GFISEC] Nimda worm analysis Sandro Gauci (Thu Sep 20 2001 - 02:38:46 PDT)
• McAfee Stand-alone removal tool Tina Bird (Thu Sep 20 2001 - 10:26:04 PDT)
• New Version of Retina Nimba Scanner info (Thu Sep 20 2001 - 17:31:06 PDT)
  • RE:New Version of Retina Nimba Scanner John Stauffacher (Fri Sep 21 2001 - 10:13:08 PDT)
  • RE: New Version of Retina Nimba Scanner bparisat_private (Fri Sep 21 2001 - 13:09:41 PDT)
  • RE: New Version of Retina Nimba Scanner Marc Maiffret (Tue Sep 25 2001 - 07:43:27 PDT)
• Port 6635 Craig, Scott (Fri Sep 21 2001 - 05:27:09 PDT)
  • Re: Port 6635 Matthew Leeds (Fri Sep 21 2001 - 09:45:32 PDT)
• Nimda on Mac? johan.augustssonat_private (Fri Sep 21 2001 - 03:22:22 PDT)
  • Re: Nimda on Mac? Kee Hinckley (Fri Sep 21 2001 - 09:24:47 PDT)
  • Re: Nimda on Mac? Zora Monster (Fri Sep 21 2001 - 11:56:59 PDT)
• IE 5.5 SP2 incident Jose Romeo Vela (Fri Sep 21 2001 - 06:48:44 PDT)
  • Re: IE 5.5 SP2 incident Lars Gaarden (Mon Sep 24 2001 - 03:04:30 PDT)
    • Re: IE 5.5 SP2 incident Jose Romeo Vela (Mon Sep 24 2001 - 08:39:17 PDT)
• Symantec Security Response - W32.Nimda.A@mm Removal Tool Owen Creger (Fri Sep 21 2001 - 08:27:32 PDT)
• Yet Another Nimda Thread (YANT) Portnoy, Gary (Fri Sep 21 2001 - 09:46:50 PDT)
  • Re: Yet Another Nimda Thread (YANT) Midnight Ryder (Fri Sep 21 2001 - 10:23:32 PDT)
  • RE: Yet Another Nimda Thread (YANT) Robert Nieuwhof (Fri Sep 21 2001 - 10:02:15 PDT)
  • Re: Yet Another Nimda Thread (YANT) hvdkooijat_private (Fri Sep 21 2001 - 10:30:36 PDT)
  • RE: Yet Another Nimda Thread (YANT) Andrew Blevins (Fri Sep 21 2001 - 09:53:16 PDT)
    • RE: Yet Another Nimda Thread (YANT) Jose Nazario (Fri Sep 21 2001 - 11:22:52 PDT)
  • Re: Yet Another Nimda Thread (YANT) Bryan Andersen (Fri Sep 21 2001 - 11:15:13 PDT)
  • Re: Yet Another Nimda Thread (YANT) Tracey Losco (Fri Sep 21 2001 - 10:43:56 PDT)
  • Re: Yet Another Nimda Thread (YANT) Mike Lewinski (Fri Sep 21 2001 - 12:15:03 PDT)
  • Re: Yet Another Nimda Thread (YANT) Florian Weimer (Fri Sep 21 2001 - 14:17:12 PDT)
  • Re: Yet Another Nimda Thread (YANT) Bryan Andersen (Sat Sep 22 2001 - 19:58:03 PDT)
• Nimda affecting HP LaserJet / JetDirect devices? Michael W. Shaffer (Fri Sep 21 2001 - 10:36:20 PDT)
  • Re: Nimda affecting HP LaserJet / JetDirect devices? Michael W. Shaffer (Fri Sep 21 2001 - 10:59:42 PDT)
  • RE: Nimda affecting HP LaserJet / JetDirect devices? Richard.Grantat_private (Fri Sep 21 2001 - 12:42:07 PDT)
    • RE: Nimda affecting HP LaserJet / JetDirect devices? Nick FitzGerald (Sun Sep 23 2001 - 09:35:38 PDT)
  • Re: Nimda affecting HP LaserJet / JetDirect devices? Florian Weimer (Fri Sep 21 2001 - 14:08:58 PDT)
  • RE: Nimda affecting HP LaserJet / JetDirect devices? auto241065at_private (Fri Sep 21 2001 - 18:02:35 PDT)
    • Re: Nimda affecting HP LaserJet / JetDirect devices? Trey Valenta (Sat Sep 22 2001 - 13:26:14 PDT)
      • Re: Nimda affecting HP LaserJet / JetDirect devices? johan.augustssonat_private (Mon Sep 24 2001 - 07:32:12 PDT)
• Nimda probes from way off IP addresses Steve Cody (Fri Sep 21 2001 - 11:20:52 PDT)
  • Re: Nimda probes from way off IP addresses Brett Glass (Fri Sep 21 2001 - 13:31:01 PDT)
• Bug in Apache 1.3.20 Server - Hackemate Research Hackemate.com.ar (Fri Sep 21 2001 - 12:05:32 PDT)
• Using NBAR to stop your users from geting Nimda from a web page Antonio Vasconcelos (Fri Sep 21 2001 - 20:59:07 PDT)
  • Re: Using NBAR to stop your users from geting Nimda from a web page Trevor (Sat Sep 22 2001 - 21:21:46 PDT)
    • Re: Using NBAR to stop your users from geting Nimda from a web page Jeff Kell (Sun Sep 23 2001 - 12:59:44 PDT)
  • Re: Using NBAR to stop your users from geting Nimda from a web page Antonio Vasconcelos (Sun Sep 23 2001 - 10:50:52 PDT)
• Strange traffic .... Elie De Brauwer (Sat Sep 22 2001 - 00:25:02 PDT)
  • Re: Strange traffic .... Paul Gear (Sat Sep 22 2001 - 21:01:44 PDT)
  • Re: Strange traffic .... John Sage (Sat Sep 22 2001 - 21:34:56 PDT)
    • Re: Strange traffic .... (final) Elie De Brauwer (Mon Sep 24 2001 - 08:10:24 PDT)
• [logs] Re: Yet Another Nimda Thread (YANT) Bryan Andersen (Sat Sep 22 2001 - 19:58:03 PDT)
• New book worth taking a look at Alfred Huger (Sun Sep 23 2001 - 07:28:18 PDT)
  • Re: New book worth taking a look at Liming Tsai (Sun Sep 23 2001 - 10:02:38 PDT)
  • Re: New book worth taking a look at Liming Tsai (Sun Sep 23 2001 - 10:02:38 PDT)
  • New book worth taking a look at Alfred Huger (Sun Sep 23 2001 - 07:28:18 PDT)
• Tracking down the still infected hosts Darren Windham (Mon Sep 24 2001 - 08:56:50 PDT)
  • RE: Tracking down the still infected hosts Martinez, Simon (Mon Sep 24 2001 - 09:14:18 PDT)
  • Re: Tracking down the still infected hosts Mike Lewinski (Mon Sep 24 2001 - 09:29:12 PDT)
  • RE: Tracking down the still infected hosts Fulton L. Preston Jr. (Mon Sep 24 2001 - 19:00:53 PDT)
    • RE: Tracking down the still infected hosts Ryan McDonnell (Mon Sep 24 2001 - 22:26:26 PDT)
    • Re: Tracking down the still infected hosts Kyle R. Hofmann (Mon Sep 24 2001 - 23:42:31 PDT)
      • Re: Tracking down the still infected hosts Tina Bird (Tue Sep 25 2001 - 09:24:49 PDT)
      • Re: Tracking down the still infected hosts Kyle R. Hofmann (Tue Sep 25 2001 - 12:28:49 PDT)
      • Re: Tracking down the still infected hosts Dale Lancaster (Tue Sep 25 2001 - 13:34:37 PDT)
      • Re: Tracking down the still infected hosts Duncan Hill (Tue Sep 25 2001 - 14:05:53 PDT)
      • Re: Tracking down the still infected hosts Josh Burroughs (Tue Sep 25 2001 - 16:00:30 PDT)
      • Re: Tracking down the still infected hosts Ryan Russell (Tue Sep 25 2001 - 14:01:10 PDT)
  • RE: Tracking down the still infected hosts Fulton L. Preston Jr. (Tue Sep 25 2001 - 12:04:27 PDT)
  • Re: Tracking down the still infected hosts Neil Dickey (Tue Sep 25 2001 - 11:58:29 PDT)
  • Re: Tracking down the still infected hosts Skip Carter (Tue Sep 25 2001 - 12:54:11 PDT)
  • Re: Tracking down the still infected hosts Nicole Haywood (Tue Sep 25 2001 - 18:03:24 PDT)
• New Virus (TROJ_VOTE.A) bonkat_private (Mon Sep 24 2001 - 13:18:26 PDT)
• TROJ_VOTE.A (WTC.EXE) bonkat_private (Mon Sep 24 2001 - 14:26:29 PDT)
  • RE: TROJ_VOTE.A (WTC.EXE) Fisher, Lee (Mon Sep 24 2001 - 15:12:32 PDT)
• Hacked using vulnerable FTP daemon. Paul Tan (Mon Sep 24 2001 - 23:43:03 PDT)
  • Re: Hacked using vulnerable FTP daemon. Patrick Andry (Tue Sep 25 2001 - 09:04:19 PDT)
  • Re: Hacked using vulnerable FTP daemon. Bojan Zdravkovic (Tue Sep 25 2001 - 12:28:46 PDT)
    • Re: Hacked using vulnerable FTP daemon. Jose Nazario (Tue Sep 25 2001 - 13:27:37 PDT)
    • Re: Hacked using vulnerable FTP daemon. Ben McGinnes (Fri Sep 28 2001 - 17:44:00 PDT)
  • Re: Hacked using vulnerable FTP daemon. Paul Tan (Wed Sep 26 2001 - 00:42:55 PDT)
• Nimda and others filter for apache venomous (Tue Sep 25 2001 - 04:20:17 PDT)
• Re: Hacked using vulnerable FTP daemon. -- next steps Paul Tan (Tue Sep 25 2001 - 19:26:33 PDT)
• rpc.statd root on a Redhat 7.0 box.... Anthony Baratta (Tue Sep 25 2001 - 19:32:29 PDT)
• Vacation Troller, Please Ignore. Jensenne Roculan (Tue Sep 25 2001 - 23:26:09 PDT)
• RV: packets in my network Sergio Candelas Noriega (Wed Sep 26 2001 - 00:42:11 PDT)
• AW: Hacked using vulnerable FTP daemon. vogtat_private (Wed Sep 26 2001 - 02:08:53 PDT)
• RE: packets in my network Palmer, Justin (Wed Sep 26 2001 - 08:42:49 PDT)
• Retina-Nimda Scanner detects Win9x as infected... Perlovsky, Boris (Wed Sep 26 2001 - 12:28:45 PDT)
  • RE: Retina-Nimda Scanner detects Win9x as infected... Stephen Villano (Wed Sep 26 2001 - 12:39:22 PDT)
    • RE: Retina-Nimda Scanner detects Win9x as infected... Marc Maiffret (Wed Sep 26 2001 - 14:40:20 PDT)
• pubdestroyer2001.exe via anonymous FTP? Mike Shaw (Thu Sep 27 2001 - 08:41:45 PDT)
  • Re: pubdestroyer2001.exe via anonymous FTP? Patrick Andry (Thu Sep 27 2001 - 09:47:22 PDT)
  • RE: pubdestroyer2001.exe via anonymous FTP? Slivkoff, Michael M (Thu Sep 27 2001 - 11:48:53 PDT)
    • RE: pubdestroyer2001.exe via anonymous FTP? Chip McClure (Thu Sep 27 2001 - 13:18:45 PDT)
  • RE: pubdestroyer2001.exe via anonymous FTP? Benninghoff, John (Thu Sep 27 2001 - 13:38:34 PDT)
    • Re: pubdestroyer2001.exe via anonymous FTP? Kevin Reardon (Thu Sep 27 2001 - 18:39:26 PDT)
• Nimda et.al. versus ISP responsibility Luc Pardon (Thu Sep 27 2001 - 09:50:14 PDT)
  • RE: Nimda et.al. versus ISP responsibility John Campbell (Thu Sep 27 2001 - 10:53:35 PDT)
  • Re: Nimda et.al. versus ISP responsibility Chip McClure (Thu Sep 27 2001 - 10:59:49 PDT)
    • Re: Nimda et.al. versus ISP responsibility geoff (Thu Sep 27 2001 - 13:08:40 PDT)
  • RE: Nimda et.al. versus ISP responsibility Adcock, Matt (Thu Sep 27 2001 - 10:57:29 PDT)
    • RE: Nimda et.al. versus ISP responsibility Tracy Martin (Thu Sep 27 2001 - 11:25:35 PDT)
      • RE: Nimda et.al. versus ISP responsibility Homer Wilson Smith (Thu Sep 27 2001 - 13:17:00 PDT)
  • Re: Nimda et.al. versus ISP responsibility Neil Dickey (Thu Sep 27 2001 - 11:59:10 PDT)
  • RE: Nimda et.al. versus ISP responsibility Michael B. Morell (Thu Sep 27 2001 - 11:27:24 PDT)
  • Re: Nimda et.al. versus ISP responsibility Rich Puhek (Thu Sep 27 2001 - 13:02:46 PDT)
  • RE: Nimda et.al. versus ISP responsibility Dave Salovesh (Thu Sep 27 2001 - 13:06:41 PDT)
  • RE: Nimda et.al. versus ISP responsibility UMusBKidNat_private (Thu Sep 27 2001 - 13:40:52 PDT)
    • Re: Nimda et.al. versus ISP responsibility robertmat_private (Thu Sep 27 2001 - 14:09:39 PDT)
    • RE: Nimda et.al. versus ISP responsibility Jason Robertson (Thu Sep 27 2001 - 15:07:20 PDT)
  • RE: Nimda et.al. versus ISP responsibility Mogull,Rich (Thu Sep 27 2001 - 14:05:39 PDT)
  • RE: Nimda et.al. versus ISP responsibility ahowardat_private (Thu Sep 27 2001 - 14:10:50 PDT)
    • RE: Nimda et.al. versus ISP responsibility Greg A. Woods (Thu Sep 27 2001 - 16:41:55 PDT)
      • RE: Nimda et.al. versus ISP responsibility Jay D. Dyson (Thu Sep 27 2001 - 17:01:23 PDT)
  • RE: Nimda et.al. versus ISP responsibility Stephen Villano (Thu Sep 27 2001 - 14:18:48 PDT)
  • RE: Nimda et.al. versus ISP responsibility Chad Mawson (Thu Sep 27 2001 - 14:47:02 PDT)
  • RE: Nimda et.al. versus ISP responsibility UMusBKidNat_private (Thu Sep 27 2001 - 13:40:10 PDT)
    • RE: Nimda et.al. versus ISP responsibility Jonathan Levy (Thu Sep 27 2001 - 17:34:28 PDT)
  • Re: Nimda et.al. versus ISP responsibility Brian Cervenka (Thu Sep 27 2001 - 15:56:28 PDT)
  • RE: Nimda et.al. versus ISP responsibility Tony Langdon (Thu Sep 27 2001 - 16:31:45 PDT)
  • Re: Nimda et.al. versus ISP responsibility terry white (Thu Sep 27 2001 - 16:29:42 PDT)
  • RE: Nimda et.al. versus ISP responsibility Dean Cunningham (Thu Sep 27 2001 - 17:25:25 PDT)
  • RE: Nimda et.al. versus ISP responsibility ahowardat_private (Thu Sep 27 2001 - 19:13:41 PDT)
  • RE: Nimda et.al. versus ISP responsibility Smith, Mark (Fri Sep 28 2001 - 00:36:08 PDT)
• JRun 3.0 SP2 Vulnerability?? Kerry Steele (Thu Sep 27 2001 - 11:01:04 PDT)
  • Re: JRun 3.0 SP2 Vulnerability?? Jason Robertson (Thu Sep 27 2001 - 13:14:01 PDT)
• Re: [RE: Nimda et.al. versus ISP responsibility] Greg Dotoli (Thu Sep 27 2001 - 12:38:28 PDT)
  • Re: [RE: Nimda et.al. versus ISP responsibility] Jason Robertson (Thu Sep 27 2001 - 13:32:15 PDT)
• RE:Nimda et.al. versus ISP responsibility ---> a few thoughts Marc Ducharme (Thu Sep 27 2001 - 11:34:23 PDT)
  • RE:Nimda et.al. versus ISP responsibility ---> a few thoughts Bill_Roydsat_private (Thu Sep 27 2001 - 13:14:23 PDT)
  • RE:Nimda et.al. versus ISP responsibility ---> a few thoughts Kee Hinckley (Thu Sep 27 2001 - 13:33:09 PDT)
• Second wave of Nimda? Tracey Losco (Thu Sep 27 2001 - 12:26:01 PDT)
  • Re: Second wave of Nimda? Jensenne Roculan (Thu Sep 27 2001 - 14:10:54 PDT)
  • RE: Second wave of Nimda? Megyesi, Heather (Thu Sep 27 2001 - 13:17:03 PDT)
• Nimda et.al. versus ISP responsibility - Laying responsibility where it belongs Fred Cohen (Thu Sep 27 2001 - 15:54:47 PDT)
  • Re: Nimda et.al. versus ISP responsibility - Laying responsibility where it belongs Neil Dickey (Fri Sep 28 2001 - 08:54:51 PDT)
• RE: Nimda et.al. versus ISP responsibility ---> a few thoughts Alejandro Mezcua (Thu Sep 27 2001 - 16:05:14 PDT)
• RE: Nimda et.al. versus ISP responsibility - Laying responsibilit y where it belongs Silcock, Stephen (Thu Sep 27 2001 - 16:38:51 PDT)
• FBI Virus Alerts twistsiwtat_private (Thu Sep 27 2001 - 10:03:26 PDT)
  • Re: FBI Virus Alerts H C (Thu Sep 27 2001 - 17:39:21 PDT)
  • Re: FBI Virus Alerts Big Woz (Thu Sep 27 2001 - 17:38:59 PDT)
    • Re: FBI Virus Alerts H C (Thu Sep 27 2001 - 18:29:05 PDT)
  • Re: FBI Virus Alerts info (Thu Sep 27 2001 - 23:38:07 PDT)
    • Re: FBI Virus Alerts David Kennedy CISSP (Fri Sep 28 2001 - 19:21:08 PDT)
      • Re: FBI Virus Alerts Chris Salter (Sat Sep 29 2001 - 04:14:13 PDT)
  • RE: FBI Virus Alerts Krul Thomas (Fri Sep 28 2001 - 11:15:15 PDT)
  • RE: FBI Virus Alerts Eaton, Arthur (Fri Sep 28 2001 - 15:04:11 PDT)
  • RE: FBI Virus Alerts Kinsey, Robert (Fri Sep 28 2001 - 15:47:30 PDT)
  • Re: FBI Virus Alerts info (Sat Sep 29 2001 - 12:43:11 PDT)
    • Re: FBI Virus Alerts Gary Maltzen (Sun Sep 30 2001 - 09:36:32 PDT)
• Nimda esponsibility - Laying appropriatel - implied warranty of sale Fred Cohen (Thu Sep 27 2001 - 20:52:31 PDT)
  • Re: Nimda esponsibility - Laying appropriatel - implied warranty of sale namorat_private (Fri Sep 28 2001 - 05:32:14 PDT)
    • Re: Nimda esponsibility - Laying appropriatel - implied warranty of sale H C (Fri Sep 28 2001 - 07:29:40 PDT)
  • Re: Nimda esponsibility - Laying appropriatel - implied warranty of sale fosterd (Fri Sep 28 2001 - 07:39:18 PDT)
    • Re: Nimda esponsibility - Laying appropriatel - implied warranty of sale Chip Mefford (Fri Sep 28 2001 - 09:44:48 PDT)
      • Re: Nimda esponsibility - Laying appropriatel - implied warranty of sale Jay D. Dyson (Fri Sep 28 2001 - 10:30:18 PDT)
• Re: Red Cross Fraud: NOT Firehose (Thu Sep 27 2001 - 21:03:22 PDT)
• Lots and lots of DNS lookups and increased number of /default.ida?XXXXXXXXXXXXXXXXXXXXXXXX...s Fred Cohen (Thu Sep 27 2001 - 21:04:44 PDT)
  • Re: Lots and lots of DNS lookups and increased number of /default.ida?XXXXXXXXXXXXXXXXXXXXXXXX...s Tracey A. Losco (Thu Sep 27 2001 - 21:39:34 PDT)
  • Re: Lots and lots of DNS lookups and increased number of /default.ida?XXXXXXXXXXXXXXXXXXXXXXXX...s Bugger Bugtraq (Thu Sep 27 2001 - 22:50:33 PDT)
  • Re: Lots and lots of DNS lookups and increased number of /default.ida?XXXXXXXXXXXXXXXXXXXXXXXX...s John Conover (Thu Sep 27 2001 - 21:43:59 PDT)
• VIRUS Riddled MIRC program? Brian Heathfield (Fri Sep 28 2001 - 07:20:20 PDT)
• Dead Thread - Nimda et.al. versus ISP responsibility Jensenne Roculan (Fri Sep 28 2001 - 10:09:04 PDT)
• RE: Lots and lots of DNS lookups and increased number of /default .ida?XXXXXXXXXXXXXXXXXXXXXXXX...s Kinsey, Robert (Fri Sep 28 2001 - 11:10:21 PDT)
• Syn packets hitting port 80, not webserver Neil Dickey (Fri Sep 28 2001 - 11:23:31 PDT)
  • Re: Syn packets hitting port 80, not webserver Matthew Leeds (Fri Sep 28 2001 - 12:17:34 PDT)
  • re: Syn packets hitting port 80, not webserver Xno Xutz (Fri Sep 28 2001 - 12:56:05 PDT)
  • Re: Syn packets hitting port 80, not webserver Neil Dickey (Fri Sep 28 2001 - 13:30:01 PDT)
    • Re: Syn packets hitting port 80, not webserver Greg A. Woods (Fri Sep 28 2001 - 16:48:42 PDT)
• ssh scans Chad Mawson (Fri Sep 28 2001 - 13:42:52 PDT)
  • Re: ssh scans Heather Adkins (Fri Sep 28 2001 - 14:04:09 PDT)
    • Re: ssh scans Matthew Leeds (Fri Sep 28 2001 - 14:20:31 PDT)
• Code Red Specifics H C (Sat Sep 29 2001 - 06:42:40 PDT)
  • Re: Code Red Specifics Valdis.Kletnieksat_private (Sat Sep 29 2001 - 20:39:49 PDT)
• slowing down the spread of worms Nathan W. Labadie (Sun Sep 30 2001 - 14:33:20 PDT)
  • RE: slowing down the spread of worms Rob Keown (Sun Sep 30 2001 - 16:57:44 PDT)
  • RE: slowing down the spread of worms Frank Knobbe (Sun Sep 30 2001 - 20:50:30 PDT)
• WARNING: Trojan Horse Disguised as Message from SecurityFocus and TrendMicro aleph1at_private (Sun Sep 30 2001 - 19:47:58 PDT)

Last message date: Mon Oct 01 2001 - 08:45:46 PDT
Archived on: Mon Oct 01 2001 - 08:45:49 PDT

This archive was generated by hypermail 2b30 : Mon Oct 01 2001 - 08:45:49 PDT