Nimda & Yahoo

Wed Sep 19 16:48:02 UTC 2001

We are already working on it.  We pushed out virus updates yesterday and
have started tracking/killing all nimba flows.  Damn thing spreads too
quickly.

Thanks for your concern.

craig
Yahoo! Inc.
Network Engineer
Y!Messenger: cholland
  -----Original Message-----
  From: owner-nanog at merit.edu [mailto:owner-nanog at merit.edu]On Behalf Of
Bill Larson
  Sent: Wednesday, September 19, 2001 9:25 AM
  To: nanog at nanog.org
  Subject: Nimda & Yahoo

  Well It looks as if the Yahoo Corporate network is infected.

  hilla.corp.yahoo.com - [19/Sep/2001:11:22:10 -0500] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 280 "-" "-"

  If anyone from Yahoo is reading this list you might want to start scanning
systems.

  ---
  Bill Larson
  Network Administrator
  Compu-Net Enterprises

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20010919/0f7290d4/attachment.html>