[rescue] New worm?

Mike Nicewonger rescue at sunhelp.org
Wed Sep 19 23:41:41 CDT 2001


On Wed, 19 Sep 2001, you wrote:
> On Wed, Sep 19, 2001 at 11:35:35PM -0400, Steve Pacenka wrote:
> >Your local subnet may not have infectable servers.  90% of the worm traffic to 
> > my little server (about 3000 probes per day this week) is from machines in my 
> >132.236.*.* subnet.  A couple of dozen nearby machines are generating a lot of 
> > traffic.
> 
mail# grep .exe error_log | wc -l
    3071

that's for both cmd.exe and root.exe

Fist fscker's

GRRRR!!!

Mike N



More information about the rescue mailing list