It didn't also happen to say "Welcome to http:// www.worm.com, did it? Sounds like Code Red. Read this:
http://securityresponse.symantec.com/avcenter/venc/data/codered.worm.html John J. Steniger > -----Original Message----- > From: Orin Rehorst [mailto:[EMAIL PROTECTED]] > Sent: Monday, December 16, 2002 11:49 AM > To: Exchange Discussions > Subject: OWA and attack by Chinese?!? > > > Running Exchange 5.5 on Win2K server, latest service packs. > > Users over weekend accessed using OWA. Got message at sign on > "page has been > hacked by Chinese." After that page wouldn't come up. Problem > cleared when > we rebooted server. > > Please advise. > > TIA > > > Regards, > Orin > > Orin Rehorst > Port of Houston Authority > (Largest U.S. port in foreign tonnage) > e-mail: [EMAIL PROTECTED] > Phone: (713)670-2443 > Fax: (713)670-2457 > TOPAS web site: <www.homestead.com/topas/topas.html> > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]