//flex table opened by JP

Click to See Complete Forum and Search --> : Sadmind/IIS/UNIX/Solaris worm


U-96
05-11-2001, 04:38 AM
Any web admins may want to check their servers, one of our subsidiary NT servers got hacked last night.
www.sophos.com (http://www.sophos.com) etc for all the latest.

Check the logs for the insertion of "root.exe" and defacement of all index.asp index.htm default.asp and default.htm pages within your server

There is a MS patch out for this, but IT DOES NOT AUTO-INSTALL! The sophos sites has links.

U-96