North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: Nimda & Yahoo

  • From: Craig Holland
  • Date: Wed Sep 19 12:51:10 2001

We are already working on it.  We pushed out virus updates yesterday and have started tracking/killing all nimba flows.  Damn thing spreads too quickly.
 
Thanks for your concern.
 
craig
Yahoo! Inc.
Network Engineer
Y!Messenger: cholland
-----Original Message-----
From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of Bill Larson
Sent: Wednesday, September 19, 2001 9:25 AM
To: nanog@nanog.org
Subject: Nimda & Yahoo

Well It looks as if the Yahoo Corporate network is infected.
 
hilla.corp.yahoo.com - [19/Sep/2001:11:22:10 -0500] "GET /scripts/root.exe?/c+dir HTTP/1.0" 404 280 "-" "-"
If anyone from Yahoo is reading this list you might want to start scanning systems.
 
---
Bill Larson
Network Administrator
Compu-Net Enterprises