[rescue] New worm?

Dave McGuire rescue at sunhelp.org
Wed Sep 19 19:57:03 CDT 2001


On September 18, Scott Newell wrote:
> I've just noticed a ton of activity in my apache log files.  Anyone else
> getting hit?  Looks like another IIS or win32 exploit:
> 
> 208.191.208.88 - - [18/Sep/2001:20:52:04 -0500] "GET
> /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 278

  It's YET ANOTHER stupid virus for stupid Windoze boxes.  I've had
7000+ hits for this crap in the past 24 hours.

  I wish these idiots would learn that connecting Windoze to the
Internet is NOT a good idea.

  "But I NEEEEEEEEEED it!"  ...morons.

       -Dave

-- 
Dave McGuire
Laurel, MD



More information about the rescue mailing list