RE: CODE RED!!!!!!!!!

  • From: "Sharma, Shobha" <c-ssharma@xxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 20 Aug 2001 12:38:43 -0400

I thought so. OEM told me to run MS script and i did that. It didn't say its
infected but I don't know why those strange entries appear in the logs. Iam
keeping an eye on the server.

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Monday, August 20, 2001 12:16 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: CODE RED!!!!!!!!!


http://www.ISAserver.org


The script doesn't modify anything.  It merely searches for the known signs
of infection.

Jim Harrison
MCP(2K), A+, Network+, PCG

----- Original Message -----
From: "Sharma, Shobha" <c-ssharma@xxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, August 20, 2001 6:01 AM
Subject: [isalist] RE: CODE RED!!!!!!!!!


http://www.ISAserver.org


No I didn't. Its running Datacenter on ES7000  and according to the
standards I can't run anything without OEM knowledge. Has anybody run that
script on datacenter, is it safe to run on it.

-----Original Message-----
From: David Dellanno [mailto:david@xxxxxxxxxx]
Sent: Monday, August 20, 2001 8:50 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: CODE RED!!!!!!!!!


http://www.ISAserver.org



This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
c-ssharma@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: