> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Kaj S. Laursen
> Sent: Wednesday, August 08, 2001 3:26 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [IMail Forum] New CodeRed like virus
>
>
> ----- Original Message -----
> From: "John Cesta - Lists" <[EMAIL PROTECTED]>
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED]]On Behalf Of Steve Polyak
> > >
> > > Has anyone been running into what seems to be a CodeRed Virus. I have
> my
> > > IIS web services stopping anywhere from a minute to an hour after
> reboot.
> > > FTP services seem to be unaffected. I have the patches installed from
> > > Microsoft since the last attack and have installed it a
> number of times
> > > since.
I see a lot of people install it over and over. No sense really all it does
is place a new copy of the dll on the server.
John
> >
> > There is actually a bug in the code red patch from microsoft.
>
> I just read this on the Windows 2000 Magazine Security mail list:
>
> "Speaking of patches, I've read several recent posts on the Bugtraq
> mailing list that indicate a problem might exist with the Microsoft
> patch listed in Microsoft Bulletin MS01-033. A few people have reported
> that after they installed the patch, their systems remain immune to Code
> Red infection. However, when an infected system attempts to connect to
> their system to infect it, several IIS services (e.g., FTP, the default
> Web site, the administrative Web site, and the proxy service) stop
> processing."
>
> So I think it't pretty much confirmed that you might have problems even
> though you patched.
>
> Kaj
>
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
