[40436] in North American Network Operators' Group
Code Red 2 cleanup; reporting..
daemon@ATHENA.MIT.EDU (z@s0be.net)
Thu Aug 9 01:57:51 2001
Date: Wed, 8 Aug 2001 22:54:34 -0700 (PDT)
From: <z@s0be.net>
To: <nanog@nanog.org>
Message-ID: <Pine.GSO.4.33.0108082245560.2571-100000@power.s0be.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
Helu,
Is there an effort abound that would allow for lists of verified 'Code
Red 2' infected hosts to be reported for cleanup/mitigation? By known 'Code
Red 2' infected hosts, I mean that root.exe has been found to exist on the
host.
Finding the contact information for a lot of these is proving difficult
being that a fair amount of the infected machines are Joe Blow broadband
customers.
Anyone?
.z
