That's Code Red. Surprised that you're just now getting it - how long has this box been online? Where are your system administrators? Why aren't they doing their job? (this box should have been patched before IIS was turned on if it's new; otherwise, five minutes a week would have ensured it was patched months ago)
Make sure that whoever is responsible for this box is well aware that they should keep patches up to date. Like I said, five minutes a week is all it takes. My suggestion to those who can't do this: unplug the network cable. ----- Original Message ----- From: "Colin Wilson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, November 17, 2001 10:39 AM Subject: Server Hack? > Anyone know how I can fix the server hack that puts up the message on > CFM pages > > Welcome to worm.com > > Hacked by chinese > > > I just got hit this morning... > > Doesn't seem to bother my other pages and the code looks fine. Just > parsed as this worm page... > > > Thanks > > Colin Wilson > > > ------------------------------------------------------------------------- > This email server is running an evaluation copy of the MailShield anti- > spam software. Please contact your email administrator if you have any > questions about this message. MailShield product info: www.mailshield.com > > ----------------------------------------------- > To post, send email to [EMAIL PROTECTED] > To subscribe / unsubscribe: http://www.dfwcfug.org > ------------------------------------------------------------------------- This email server is running an evaluation copy of the MailShield anti- spam software. Please contact your email administrator if you have any questions about this message. MailShield product info: www.mailshield.com ----------------------------------------------- To post, send email to [EMAIL PROTECTED] To subscribe / unsubscribe: http://www.dfwcfug.org
