Date: Wed, 19 Sep 2001 14:19:05 +0930 (CST) From: Jarrod Sayers <Jarrod.Sayers@unisa.edu.au> To: klein brock <getzz1@yahoo.com> Cc: <freebsd-stable@FreeBSD.org> Subject: Re: virus ? Message-ID: <20010919141634.O54987-100000@sanctuary.magill.unisa.edu.au> In-Reply-To: <20010919043819.45703.qmail@web20108.mail.yahoo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 18 Sep 2001, klein brock wrote: > Date: Tue, 18 Sep 2001 21:38:19 -0700 (PDT) > From: klein brock <getzz1@yahoo.com> > To: freebsd-stable@FreeBSD.org > Subject: virus ? > > i'm currently using freebsd4.4-prerelease .... but my > server is infected by a virus: > > 208.187.190.248 - - [18/Sep/2001:20:40:04 -0700] "GET > /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir > HTTP/1.0" 404 301 > 208.187.190.248 - - [18/Sep/2001:20:40:04 -0700] "GET > /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir > HTTP/1.0" 404 301 > > if i upgrade it to 4.4-stable, will the virus remove > from my server ? or i have to re-install by cd and > cvsup ? There is no virus on your machine, its a Windows machine somewhere trying to infect your server. Unless your running IIS on it somehow, then you don;t have anything to worry about. http://www.mcafee.com/anti-virus/viruses/nimda/default.asp?cid=2444 > can i know what the possibility that my server > infected by this virus ? 0%? Jarrod Sayers Information Technologist School of Communication, Information and New Media University of South Australia, Magill Campus. Phone: +61 8 83024045 Fax: +61 8 83024745 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010919141634.O54987-100000>