Re: NIMDA - ceased ? -

From: Skip Carter (skipat_private)
Date: Fri Dec 27 2002 - 09:58:02 PST

Next message: Johannes Ullrich: "Re: NIMDA - ceased ? -"

Previous message: Neil Dickey: "Re: NIMDA - ceased ? -"
Next in thread: Johannes Ullrich: "Re: NIMDA - ceased ? -"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi,

> Is NIMDA ...(GET /scripts/..%252f../winnt/system32 ...something)
> ceased ?
> 04:54, Dec. 23 UTC is the last access of them, around here.

  We are still seeing a half dozen or so a day.  The last was on
  08:26 26 Dec PST.




-- 
 Dr. Everett (Skip) Carter      Phone: 831-641-0645 FAX:  831-641-0647
 Taygeta Scientific Inc.        INTERNET: skipat_private
 1340 Munras Ave., Suite 314    WWW: http://www.taygeta.com
 Monterey, CA. 93940            












----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Johannes Ullrich: "Re: NIMDA - ceased ? -"
Previous message: Neil Dickey: "Re: NIMDA - ceased ? -"
Next in thread: Johannes Ullrich: "Re: NIMDA - ceased ? -"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Dec 27 2002 - 15:50:37 PST