Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 18 Sep 2001 18:08:06 -0500
From:      Dan Nelson <dnelson@allantgroup.com>
To:        Andre` Niel Cameron <AndreC@Axxs.net>
Cc:        free bsd <freebsd-questions@FreeBSD.ORG>
Subject:   Re: NEW VIRUS - Read this!(No the virus isn't included!)
Message-ID:  <20010918180806.A29509@dan.emsphone.com>
In-Reply-To: <03fd01c14094$6482b670$a50410ac@olmct.net>
References:  <03e701c14090$00299d00$a50410ac@olmct.net> <20010918184036.316a8458.matthew@starbreaker.net> <03fd01c14094$6482b670$a50410ac@olmct.net>

next in thread | previous in thread | raw e-mail | index | archive | help
In the last episode (Sep 18), Andre` Niel Cameron said:
> > MS servers pounding your Unix-based webserver, you'll probably have
> > what amounts to a half-assed DDoS attack.
> 
> I work for a hosting company and we only have linux machines...  We
> have been having problems ALL day because of this thing.  It is
> running linux hacks too, I checked out some error logs it was
> probing.  This thing is nasty.  Our email servers are almost ALL down
> and our webservers are lagging under the strain from our email
> servers.  It's not making my day a happy one.

You're probably not seeing the same thing as what he was talking about
then.  The only virus I've seen scanning my servers today is W32/Nimda:
http://www.sarc.com/avcenter/venc/data/w32.nimda.a@mm.html , and all it
does is look for root.exe and cmd.exe in 16 different ways.

-- 
	Dan Nelson
	dnelson@allantgroup.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010918180806.A29509>