 SteveI know your IP addressConsultant
join:2001-03-10
Yorba Linda, CA
kudos:5
| reply to RenHoek
Re: New Code Red signature? said by dwmorris:
Yep, I'm up to 95 of these wierdo's since about 5am this morning!
I'm convinced this is a new strain, because I cannot find one reference to it on any of the security lists that I'm a member of. The odd part: the NNNN -vs- AAAA stuff shouldn't matter to the payload of the worm, because the real work is done by the parts that follow. Maybe the authors just wanted to make things a little easier for us?
But one note: though this may be a new variant, it's not a new threat. If you were patched before, you are patched now, so this is nothing but a curiosity.
DW: what was the timestamp on your first new scan?
Steve
--
Stephen J. Friedl / Software Consultant / Tustin, California USA / »www.unixwiz.net
[text was edited by author 2001-08-04 12:51:29] |
