Nimda worm (Re: [Gllug] Code Blue)

Lee Blackwell lee_blackwell at eur.3com.com
Wed Sep 19 12:52:57 UTC 2001


Nimda, = Admin (backwards)

-- 
Lee Blackwell
Unix Specialist, NCS, 3com IT.
"You're just jealous because the voices are talking to me."

On Wed, 19 Sep 2001, jim wrote:

>
> The "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"  thing
> is not Code Blue after all, it's a new one variously known as Nimda, Code
> Rainbow and Concept Virus v.5 . Info on Bugtraq and Slashdot.
>
> What sort of a name is Nimda anyway? Acronym? "Not In My Data ... Apache"?
>
> jim
> --
> http://madeira.physiol.ucl.ac.uk/people/jim/
> "... I naturally gravitated to London, that great cesspool into which all
> the
>  loungers and idlers of the Empire are irresistibly drained."
>                                 - Sir Arthur Conan Doyle, "A Study in
> Scarlet"
>
>
> --
> Gllug mailing list  -  Gllug at linux.co.uk
> http://list.ftech.net/mailman/listinfo/gllug
>


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug




More information about the GLLUG mailing list