[PLUG] another virus
Brent Meshier
brent@meshier.com
Tue, 18 Sep 2001 13:25:15 -0500
Another Code Red like virus called Nimda is propagating amongst Win IIs
servers today. Unlike code red, this one makes 16 HTTP requests. Of
course, running Apache this has little to no effect on my web server.
However, my attention was brought to the fact that the OC-3 to Cable &
Wireless has tripled in latency and is experiencing 10% packet loss, argh..
Anyhow, do you think this will be the last straw for many Windows sys
admins? Perhaps the Linux/UN*X market share will now make a huge leap?
On the topic of virii, a week ago the SirCam32 started showing itself again
(at least in my inbox). Now I'm averaging 50-80 emails a day (no joke)
reading "I send you this file in order to have your advice". Is there a way
for sendmail to filter all this crap out? I'm probably heavily targeted
because of my email address is on PurdueOnline and therefore in many peoples
caches. On the bright side, I could almost build a complete document
library containing homework, notes and projects for every class offered at
Purdue :) Someone mentioned there's a safe and easy way to view the
infected files on Linux? Was it a hex editor?
--Brent