RE: CODE RED!!!!!!!!!

  • From: "Sharma, Shobha" <c-ssharma@xxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 20 Aug 2001 09:02:16 -0400

But I don't see the "root.exe" file on the partition.

-----Original Message-----
From: cismic [mailto:cismic@xxxxxxx]
Sent: Monday, August 20, 2001 8:53 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: CODE RED!!!!!!!!!


http://www.ISAserver.org


I would say the 200 at the end of your log entry could mean that you
were infected:

200 - OK Message - the requested HTTP page was fulfilled.
If ISA server blocks the item via the default rule then the log entry
would show 12206.


Joseph




-----Original Message-----
From: Sharma, Shobha [mailto:c-ssharma@xxxxxxxxxxx] 
Sent: Monday, August 20, 2001 5:35 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] CODE RED!!!!!!!!!

http://www.ISAserver.org



This message is in MIME format. Since your mail reader does not
understand
this format, some or all of this message may not be legible.


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
c-ssharma@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: