At 02:00 AM 12/26/2002 +0900, you wrote: >Hi, all. > >Is NIMDA ...(GET /scripts/..%252f../winnt/system32 ...something) >ceased ? >04:54, Dec. 23 UTC is the last access of them, around here. > >Any comments ? No, it hasn't ceased, but the overall activity is down. See... www.wormwatch.org and www.wormwatch.org/images/WCMthly.html Roger Regards Roger Thompson Technical Director of Malicious Code Research TruSecure Corporation www.trusecure.com www.wormwatch.org ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Mon Dec 30 2002 - 09:47:34 PST