Starting: Tue Sep 04 2001 - 14:49:04 CDT
Ending: Sun Sep 30 2001 - 22:00:12 CDT

• Re: The x.c worm Dave Dittrich (Tue Sep 04 2001 - 14:37:37 CDT)
• ARIS Analyzer Version 1.5 Oliver Friedrichs (Tue Sep 04 2001 - 14:50:34 CDT)
• Re: The x.c worm Dave Dittrich (Tue Sep 04 2001 - 15:03:16 CDT)
• Re: weird directories in /root [SOLVED] Tarek W. (Tue Sep 04 2001 - 18:48:54 CDT)
• Lengthy probes of port 8500 Paul Gear (Wed Sep 05 2001 - 02:51:12 CDT)
• Re: The x.c worm Martin Roesch (Wed Sep 05 2001 - 10:11:39 CDT)
• New Linux Trojan Qualys Inc (Wed Sep 05 2001 - 15:12:53 CDT)
• Re: New Linux Trojan Ben Ford (Wed Sep 05 2001 - 15:57:12 CDT)
• Re: New Linux Trojan Russell Fulton (Wed Sep 05 2001 - 16:26:01 CDT)
• Multiple Vendor Telnetd Buffer Overflow Vulnerability Worm Alfred Huger (Wed Sep 05 2001 - 16:35:10 CDT)
• Re: New Linux Trojan Jason Robertson (Wed Sep 05 2001 - 17:15:08 CDT)
• Code red variants? Russell Fulton (Wed Sep 05 2001 - 18:14:18 CDT)
• Strange traffic auto230111hushmail.com (Wed Sep 05 2001 - 19:22:23 CDT)
• Re: Strange traffic Jens Hektor (Thu Sep 06 2001 - 01:06:14 CDT)
• Re: Lengthy probes of port 8500 Soeren Ziehe (Thu Sep 06 2001 - 05:25:00 CDT)
• Re: Strange traffic Todd Ransom (Thu Sep 06 2001 - 08:49:40 CDT)
• RE: New Linux Trojan Vidovic,Zvonimir,VEVEY,GL-IS/CIS (Thu Sep 06 2001 - 08:01:02 CDT)
• Re: Code red variants? Matthew Collins (Thu Sep 06 2001 - 04:49:20 CDT)
• RE: Code red variants? Korkmaz, Murat (Wed Sep 05 2001 - 20:06:36 CDT)
• Re: New Linux Trojan Brett Glass (Thu Sep 06 2001 - 11:03:26 CDT)
• Re: New Linux Trojan Gary Flynn (Thu Sep 06 2001 - 09:43:32 CDT)
• Re: Code red variants? Russell Fulton (Thu Sep 06 2001 - 16:28:06 CDT)
• New variant of Magistr virus discovered LynnMCraaol.com (Thu Sep 06 2001 - 12:39:14 CDT)
• Re: New variant of Magistr virus discovered Berislav Kucan (Fri Sep 07 2001 - 06:40:32 CDT)
• WebDAV Propfind? Anyone? McCammon, Keith (Fri Sep 07 2001 - 13:45:44 CDT)
• x.c worm analysis Ryan Russell (Fri Sep 07 2001 - 14:47:06 CDT)
• Recent Increase in Port 139 Activity John Campbell (Fri Sep 07 2001 - 14:52:55 CDT)
• Re: Recent Increase in Port 139 Activity Harlan S. Barney, Jr. (Fri Sep 07 2001 - 16:34:06 CDT)
• RE: WebDAV Propfind? Anyone? Frank Knobbe (Fri Sep 07 2001 - 17:19:02 CDT)
• RE: Recent Increase in Port 139 Activity Frank Knobbe (Fri Sep 07 2001 - 17:22:42 CDT)
• RE: Recent Increase in Port 139 Activity John Campbell (Fri Sep 07 2001 - 18:34:10 CDT)
• code red attacks and real-time blackhole'ng Florian Piekert (Fri Sep 07 2001 - 18:46:56 CDT)
• Re: Recent Increase in Port 139 Activity maggiebinarydecisions.com (Fri Sep 07 2001 - 18:58:29 CDT)
• RE: WebDAV Propfind? Anyone? McCammon, Keith (Sat Sep 08 2001 - 11:38:18 CDT)
• Re: RE: WebDAV Propfind? Anyone? Floris Meester (Sat Sep 08 2001 - 07:14:56 CDT)
• code red to ftp? Kevin Holmquist (Sat Sep 08 2001 - 13:37:03 CDT)
• update: port 139 traffic Kevin Holmquist (Sat Sep 08 2001 - 13:44:58 CDT)
• Re: code red attacks and real-time blackhole'ng red0x (Sat Sep 08 2001 - 00:30:18 CDT)
• Re: New Linux Trojan Nick FitzGerald (Sat Sep 08 2001 - 18:56:15 CDT)
• Re: Recent Increase in Port 139 Activity H C (Sun Sep 09 2001 - 15:07:07 CDT)
• Pretty stealthy SSH scanning seen on the Internet. Erik Fichtner (Sun Sep 09 2001 - 13:40:36 CDT)
• Re: Pretty stealthy SSH scanning seen on the Internet. Dug Song (Sun Sep 09 2001 - 20:15:38 CDT)
• Re: Pretty stealthy SSH scanning seen on the Internet. Kent Engström (Mon Sep 10 2001 - 05:23:21 CDT)
• Re: Pretty stealthy SSH scanning seen on the Internet. Andreas Östling (Mon Sep 10 2001 - 05:55:58 CDT)
• Remote Shell Trojan: Threat, Origin and the Solution kai takashi (Sun Sep 09 2001 - 06:40:27 CDT)
• Re: Remote Shell Trojan: Threat, Origin and the Solution Nick FitzGerald (Sun Sep 09 2001 - 17:47:16 CDT)
• Re: Pretty stealthy SSH scanning seen on the Internet. dove (Mon Sep 10 2001 - 05:55:09 CDT)
• strange codered2-like request buschermanngmx.de (Mon Sep 10 2001 - 07:30:33 CDT)
• RE: Remote Shell Trojan: Threat, Origin and the Solution John Stauffacher (Mon Sep 10 2001 - 10:25:43 CDT)
• Re: WebDAV Propfind? Anyone? Todd Ransom (Mon Sep 10 2001 - 09:44:49 CDT)
• RE: code red attacks and real-time blackhole'ng NESTING, DAVID M (SBCSI) (Mon Sep 10 2001 - 10:29:09 CDT)
• Re: Remote Shell Trojan: Threat, Origin and the Solution Kevin Gagel (Mon Sep 10 2001 - 10:34:01 CDT)
• RE: Recent Increase in Port 139 Activity John Campbell (Mon Sep 10 2001 - 11:32:02 CDT)
• Re: Remote Shell Trojan: Threat, Origin and the Solution Patrick Andry (Mon Sep 10 2001 - 12:38:40 CDT)
• RE: Remote Shell Trojan: Threat, Origin and the Solution Matt Block (Mon Sep 10 2001 - 13:31:34 CDT)
• RE: Remote Shell Trojan: Threat, Origin and the Solution Jonathan Rickman (Mon Sep 10 2001 - 15:46:41 CDT)
• MS DNS Zone Transfer Exploit Stacy M. Williams (Mon Sep 10 2001 - 17:12:40 CDT)
• Contact for McDonnell Douglas Corporation (NET-MDC-NET) Russell Fulton (Mon Sep 10 2001 - 16:54:15 CDT)
• Re: strange codered2-like request Nick FitzGerald (Mon Sep 10 2001 - 15:45:50 CDT)
• RE: similar problems to (NET-MDC-NET) fuzzz (Mon Sep 10 2001 - 19:19:41 CDT)
• Re: Contact for McDonnell Douglas Corporation (NET-MDC-NET) Russell Fulton (Mon Sep 10 2001 - 19:08:40 CDT)
• Re: Contact for McDonnell Douglas Corporation (NET-MDC-NET) Kath (Mon Sep 10 2001 - 19:09:52 CDT)
• Re: Pretty stealthy SSH scanning seen on the Internet. Crist J. Clark (Mon Sep 10 2001 - 21:41:45 CDT)
• Guess the tool... Portnoy, Gary (Tue Sep 11 2001 - 07:47:07 CDT)
• Re: Guess the tool... H C (Tue Sep 11 2001 - 11:07:22 CDT)
• Re: Guess the tool... Paul Gear (Tue Sep 11 2001 - 14:27:09 CDT)
• Terroristic attacks today Rich Puhek (Tue Sep 11 2001 - 14:45:16 CDT)
• RE: Terroristic attacks today Pitcher, Glenn (Tue Sep 11 2001 - 14:54:09 CDT)
• RE: Terroristic attacks today Brad Bemis (Tue Sep 11 2001 - 14:54:33 CDT)
• DMCA Strikes again red0x (Tue Sep 11 2001 - 14:45:35 CDT)
• Re: Terroristic attacks today Johannes B. Ullrich (Tue Sep 11 2001 - 14:56:54 CDT)
• Re: Terroristic attacks today Geoff Galitz (Tue Sep 11 2001 - 15:04:45 CDT)
• RE: Terrorist attacks today Richard.Grantmail.state.ky.us (Tue Sep 11 2001 - 15:04:44 CDT)
• Re: Terroristic attacks today Alvin Oga (Tue Sep 11 2001 - 15:08:11 CDT)
• Re: Terroristic attacks today Joe Shaw (Tue Sep 11 2001 - 15:16:40 CDT)
• Re: Terroristic attacks today Shoten (Tue Sep 11 2001 - 15:03:43 CDT)
• RE: Terroristic attacks today Vachon, Scott (Tue Sep 11 2001 - 15:39:13 CDT)
• Re: Terroristic attacks today Boss (Tue Sep 11 2001 - 16:01:38 CDT)
• Middle East Attacks John (Tue Sep 11 2001 - 20:20:12 CDT)
• Any one seen any evidence of "Code Blue?" Michael Katz (Tue Sep 11 2001 - 21:18:39 CDT)
• Re: Any one seen any evidence of "Code Blue?" Yaakov Yehudi (Wed Sep 12 2001 - 07:02:49 CDT)
• RE: Guess the tool... Portnoy, Gary (Wed Sep 12 2001 - 07:18:54 CDT)
• Re: Any one seen any evidence of "Code Blue?" Nick FitzGerald (Wed Sep 12 2001 - 03:41:38 CDT)
• RE: Evil samples from Microsoft Florin Timariu (Wed Sep 12 2001 - 07:56:40 CDT)
• Evil samples from Microsoft CSIRT.WS (Wed Sep 12 2001 - 04:54:31 CDT)
• RE: Terroristic attacks today david debrouwere (Wed Sep 12 2001 - 07:57:58 CDT)
• Re: Any one seen any evidence of "Code Blue?" Pedro Miller Rabinovitch (Wed Sep 12 2001 - 10:58:16 CDT)
• RE: Terroristic attacks today Ben N. Venzke (Wed Sep 12 2001 - 11:44:15 CDT)
• RE: Any one seen any evidence of "Code Blue?" Patrick Belcher, Monitored Security (Wed Sep 12 2001 - 11:35:17 CDT)
• Information site Ken Pfeil (Tue Sep 11 2001 - 19:24:38 CDT)
• Re: Terroristic attacks today James Puckett (Wed Sep 12 2001 - 12:28:56 CDT)
• Warning & Indicators - Cyber Conflict Ben N. Venzke (Wed Sep 12 2001 - 13:10:21 CDT)
• Re: Any one seen any evidence of "Code Blue?" H C (Wed Sep 12 2001 - 13:23:55 CDT)
• Possible new trojan? Mike Blomgren (Thu Sep 13 2001 - 04:45:26 CDT)
• Re: Possible new trojan? H C (Thu Sep 13 2001 - 12:20:59 CDT)
• Re: Possible new trojan? Mike Blomgren (Thu Sep 13 2001 - 13:39:54 CDT)
• Time.com security contact? bugtraq (Thu Sep 13 2001 - 12:13:05 CDT)
• Re: Time.com security contact? Jay D. Dyson (Thu Sep 13 2001 - 16:24:33 CDT)
• Run a mail host with a public MX record? Seeing large numbers of bounces? Andrew van der Stock (Thu Sep 13 2001 - 21:29:09 CDT)
• Re: code red attacks and real-time blackhole'ng Sean Hunter (Fri Sep 14 2001 - 02:23:26 CDT)
• Re: Run a mail host with a public MX record? Seeing large numbers of bounces? Richie B. (Fri Sep 14 2001 - 03:50:04 CDT)
• Re: Run a mail host with a public MX record? Seeing large numbers of bounces? Sean Hunter (Fri Sep 14 2001 - 04:19:51 CDT)
• RE: Possible new trojan? Ryan Hill (Fri Sep 14 2001 - 18:50:31 CDT)
• Re: Run a mail host with a public MX record? Seeing large numbers of bounces? Sean Hunter (Sat Sep 15 2001 - 06:32:31 CDT)
• Red Cross Fraud Firehose (Sat Sep 15 2001 - 21:28:43 CDT)
• Re: Red Cross Fraud Akatosh (Sun Sep 16 2001 - 13:32:48 CDT)
• Workaround for (RE: Run a mail host with a public MX record? Seeing large numbers of bounces?) Andrew van der Stock (Sun Sep 16 2001 - 18:46:51 CDT)
• RE: Red Cross Fraud Brian Morin (Sun Sep 16 2001 - 18:45:48 CDT)
• Ping Scan Frank Knobbe (Sun Sep 16 2001 - 23:51:53 CDT)
• Re: Incident Response Yuri Demchenko (Mon Sep 17 2001 - 04:48:59 CDT)
• RE: Ping Scan Tulchinskiy, Sasha (Mon Sep 17 2001 - 08:28:36 CDT)
• RE: Ping Scan Frank Knobbe (Mon Sep 17 2001 - 08:52:09 CDT)
• RE: Ping Scan Fernando Cardoso (Mon Sep 17 2001 - 03:32:11 CDT)
• Re: Possible new trojan? Daniel Martin (Mon Sep 17 2001 - 08:57:42 CDT)
• RE: Ping Scan Fernando Cardoso (Mon Sep 17 2001 - 10:55:06 CDT)
• RE: Ping Scan Ofir Arkin (Mon Sep 17 2001 - 12:25:21 CDT)
• CodeBlue finally hitting, or what? Portnoy, Gary (Tue Sep 18 2001 - 09:24:00 CDT)
• More complete log - looks viral to me... Fred Cohen (Tue Sep 18 2001 - 09:25:12 CDT)
• New worm ?? Cory McIntire (Tue Sep 18 2001 - 09:51:01 CDT)
• Concept Virus(CV) V.5 - Advisory and Quick analysis Olle Segerdahl (Tue Sep 18 2001 - 09:47:00 CDT)
• XdesktopdesktopdesktoNew email based virus - first one just arrived here... Fred Cohen (Tue Sep 18 2001 - 09:29:31 CDT)
• New worm? 'readme.eml' Pedro Miller Rabinovitch (Tue Sep 18 2001 - 10:11:38 CDT)
• Re: New worm ?? Pedro Miller Rabinovitch (Tue Sep 18 2001 - 10:32:59 CDT)
• Re: CodeBlue finally hitting, or what? Eric Jacobsen (Tue Sep 18 2001 - 10:26:24 CDT)
• Re: CodeBlue finally hitting, or what? Jason Giglio (Tue Sep 18 2001 - 10:36:35 CDT)
• NIPC Advisory 01-021, "Potential DDoS Attacks" VanMeter, John (Tue Sep 18 2001 - 05:12:50 CDT)
• Re: New worm? 'readme.eml' Christopher X. Candreva (Tue Sep 18 2001 - 10:46:48 CDT)
• Possible new worm using directory traversal vulnerability? thomas lakofski (Tue Sep 18 2001 - 09:13:14 CDT)
• Re: Concept Virus(CV) V.5 - Advisory and Quick analysis Dave Sill (Tue Sep 18 2001 - 09:45:16 CDT)
• Some brief details on new worm E. Larry Lidz (Tue Sep 18 2001 - 10:34:19 CDT)
• Re: New worm? 'readme.eml' coopsophos.com (Tue Sep 18 2001 - 10:47:32 CDT)
• command execution attempts Keith.Morgan (Tue Sep 18 2001 - 08:59:23 CDT)
• Re: New "concept" virus/worm? Jay D. Dyson (Tue Sep 18 2001 - 11:21:01 CDT)
• Interesting Scan--Looks like a new worm. Steve Halligan (Tue Sep 18 2001 - 09:13:56 CDT)
• Concept Virus(CV) V.5 - Quick analysis update Olle Segerdahl (Tue Sep 18 2001 - 10:58:39 CDT)
• Massive CMD.EXE and ROOT.EXE scan Tulchinskiy, Sasha (Tue Sep 18 2001 - 08:54:59 CDT)
• New Worm or Attack VanMeter, John (Tue Sep 18 2001 - 11:31:11 CDT)
• Rekindled sploit scanning? Aj Effin Reznor (Tue Sep 18 2001 - 09:08:04 CDT)
• Re: New "concept" virus/worm? Brett Glass (Tue Sep 18 2001 - 11:57:36 CDT)
• RE: Concept Virus(CV) V.5 - Advisory and Quick analysis Mark Challender (Tue Sep 18 2001 - 11:57:19 CDT)
• Re: New "concept" virus/worm? Berislav Kucan (Tue Sep 18 2001 - 12:26:10 CDT)
• Re: CodeBlue finally hitting, or what? Tracey Losco (Tue Sep 18 2001 - 10:39:15 CDT)
• Re: New worm ?? Jay D. Dyson (Tue Sep 18 2001 - 11:14:47 CDT)
• New "concept" virus/worm? Joao Gouveia (Tue Sep 18 2001 - 10:42:51 CDT)
• Website automating download of readme.eml Sean Kelly (Tue Sep 18 2001 - 11:17:58 CDT)
• Re: New "concept" virus/worm? Dan Jones (Tue Sep 18 2001 - 12:01:50 CDT)
• massive cmd.exe and root.exe attempts Patrick Beam (Tue Sep 18 2001 - 12:05:55 CDT)
• RE: New worm ?? Olivier DEMBOUR (Tue Sep 18 2001 - 10:31:00 CDT)
• Re: New "concept" virus/worm? Jim Olsen (Tue Sep 18 2001 - 13:01:51 CDT)
• Some more details on the worm Davis, Matt (Tue Sep 18 2001 - 11:44:07 CDT)
• Fwd: Massive CMD.EXE and ROOT.EXE scan Florian Piekert (Tue Sep 18 2001 - 12:44:33 CDT)
• A suggestion to Concept/Nimda analysts Stuart Staniford (Tue Sep 18 2001 - 13:04:31 CDT)
• Re: New "concept" virus/worm? Ryan Russell (Tue Sep 18 2001 - 12:54:20 CDT)
• is this new Don Weber (Tue Sep 18 2001 - 12:44:54 CDT)
• RE: New "concept" virus/worm? Guillaume TARRARE (Tue Sep 18 2001 - 12:51:33 CDT)
• Concept Virus / Nimda Gary Warner (Tue Sep 18 2001 - 13:37:04 CDT)
• nimda tries to send mail after reboot John Q. Public (Tue Sep 18 2001 - 13:41:21 CDT)
• New worm behavior ? Owen Creger (Tue Sep 18 2001 - 14:04:33 CDT)
• Re: massive cmd.exe and root.exe attempts Sean Kelly (Tue Sep 18 2001 - 13:22:35 CDT)
• Explorer Dr. Watsons Chris Thornberry (Tue Sep 18 2001 - 14:32:26 CDT)
• Nimda Worm Alert Jensenne Roculan (Tue Sep 18 2001 - 13:08:31 CDT)
• Re: Explorer Dr. Watsons FYOM (Tue Sep 18 2001 - 15:00:28 CDT)
• Re: [unisog] Some more details on the worm Gary Flynn (Tue Sep 18 2001 - 14:57:30 CDT)
• Re: Fwd: Massive CMD.EXE and ROOT.EXE scan John Q. Public (Tue Sep 18 2001 - 13:51:35 CDT)
• RE: New worm? 'readme.eml' Mark Ng (Tue Sep 18 2001 - 10:51:00 CDT)
• Re: New worm? 'readme.eml' Tony Abedini (Tue Sep 18 2001 - 13:56:22 CDT)
• More on the Worm Aj Effin Reznor (Tue Sep 18 2001 - 13:52:37 CDT)
• RE: Explorer Dr. Watsons James Paterson (Tue Sep 18 2001 - 14:57:16 CDT)
• Re: Concept Virus(CV) V.5 - Advisory and Quick analysis Dave Sill (Tue Sep 18 2001 - 13:13:00 CDT)
• RE: New "concept" virus/worm? Ronny Vaningh (Tue Sep 18 2001 - 11:50:22 CDT)
• Admin.dll (strings ./Admin.dll) w1re p4ir (Tue Sep 18 2001 - 12:52:34 CDT)
• Re: Explorer Dr. Watsons Jeremy 'Circ' Charles (Tue Sep 18 2001 - 15:07:21 CDT)
• Re: Concept Virus(CV) V.5 - Quick analysis update Brian Pomeroy (Tue Sep 18 2001 - 13:24:05 CDT)
• New worm segfaults apache bugtraq (Tue Sep 18 2001 - 10:37:11 CDT)
• Re: nimda tries to send mail after reboot John Q. Public (Tue Sep 18 2001 - 14:32:01 CDT)
• SV: New worm behavior ? Peter Kruse (Tue Sep 18 2001 - 14:28:30 CDT)
• RE: New "concept" virus/worm? Christian Hampson (Tue Sep 18 2001 - 13:29:09 CDT)
• Re: New worm segfaults apache Chip McClure (Tue Sep 18 2001 - 16:46:00 CDT)
• RE: New "concept" virus/worm? Joseph P Frazee (Tue Sep 18 2001 - 15:05:08 CDT)
• Re: Admin.dll (strings ./Admin.dll) Robert D. (Tue Sep 18 2001 - 14:51:22 CDT)
• New worm behavior ? Owen Creger (Tue Sep 18 2001 - 15:07:08 CDT)
• RE: New "concept" virus/worm? Tina Bird (Tue Sep 18 2001 - 14:50:46 CDT)
• RE: Explorer Dr. Watsons Steve Halligan (Tue Sep 18 2001 - 14:56:42 CDT)
• test for browser vulnerability oncemyway (Tue Sep 18 2001 - 15:17:38 CDT)
• Nimda Probes Stopped Jason Giglio (Tue Sep 18 2001 - 13:49:23 CDT)
• NIMDA has a built in timer? No hits lately David Kennedy CISSP (Tue Sep 18 2001 - 16:37:59 CDT)
• RE: Concept Virus / Nimda Grab Raham (Tue Sep 18 2001 - 21:02:33 CDT)
• W32.Nimda.Amm Worm Behavior Owen Creger (Tue Sep 18 2001 - 15:17:15 CDT)
• McAffee and Removal for W32/NimdaMM? Chris Thornberry (Tue Sep 18 2001 - 15:41:14 CDT)
• Re: Nimda Probes Stopped Stuart Staniford (Tue Sep 18 2001 - 17:46:33 CDT)
• possible early worm vector? Greg Broiles (Tue Sep 18 2001 - 16:25:56 CDT)
• RE: Some more details on the worm Steiner, Michael (Tue Sep 18 2001 - 13:47:36 CDT)
• Re: New "concept" virus/worm? Michael H. Warfield (Tue Sep 18 2001 - 16:16:46 CDT)
• Nimda.amm: anecdotal symptoms Justin Hahn (Tue Sep 18 2001 - 12:55:12 CDT)
• RE: CodeBlue finally hitting, or what? Becky Pinkard (Tue Sep 18 2001 - 17:29:22 CDT)
• Re: New "concept" virus/worm? Bernie Cosell (Tue Sep 18 2001 - 15:13:22 CDT)
• RE: New "concept" virus/worm? Peter Mueller (Tue Sep 18 2001 - 15:41:56 CDT)
• Re: More on the Worm Michael H. Warfield (Tue Sep 18 2001 - 16:14:03 CDT)
• Re: Admin.dll (strings ./Admin.dll) Gary Flynn (Tue Sep 18 2001 - 17:45:42 CDT)
• RE: Concept Virus(CV) V.5 - Advisory and Quick analysis Robert Nieuwhof (Tue Sep 18 2001 - 16:00:36 CDT)
• Re: NIMDA has a built in timer? No hits lately Sevo Stille (Tue Sep 18 2001 - 18:56:42 CDT)
• WORM FORENSICS? Technical Support (Tue Sep 18 2001 - 15:24:32 CDT)
• Re: nimda tries to send mail after reboot Paul Seaman (Tue Sep 18 2001 - 16:57:09 CDT)
• Re: nimda tries to send mail after reboot John Q. Public (Tue Sep 18 2001 - 17:52:49 CDT)
• Curious AV behavior wrt Nimda kawaii (Tue Sep 18 2001 - 14:30:27 CDT)
• RE: McAffee and Removal for W32/NimdaMM? William Holmberg (Tue Sep 18 2001 - 18:04:39 CDT)
• Re: New worm segfaults apache hanzinter-tel.net (Tue Sep 18 2001 - 19:15:02 CDT)
• RE: Explorer Dr. Watsons Arnold, Jamie (Tue Sep 18 2001 - 18:28:08 CDT)
• RE: New "concept" virus/worm? Tom Smit (Tue Sep 18 2001 - 17:27:53 CDT)
• Re: New worm segfaults apache Chris Hardie (Tue Sep 18 2001 - 18:14:26 CDT)
• Re: Admin.dll (strings ./Admin.dll) TJ Jablonowski (Tue Sep 18 2001 - 18:20:14 CDT)
• Re: Concept Virus(CV) V.5 - Advisory and Quick analysis Jose Nazario (Tue Sep 18 2001 - 16:43:40 CDT)
• Re: [unisog] Some more details on the worm Jeffrey Altman (Tue Sep 18 2001 - 19:54:51 CDT)
• Re: NIMDA has a built in timer? No hits lately Paul Gear (Tue Sep 18 2001 - 18:13:17 CDT)
• Re: massive cmd.exe and root.exe attempts screamer (Tue Sep 18 2001 - 15:51:09 CDT)
• Re: nimda tries to send mail after reboot Brett Glass (Tue Sep 18 2001 - 17:40:08 CDT)
• Nimda Worm Mitigation John Davidson (Tue Sep 18 2001 - 18:56:13 CDT)
• Re: Admin.dll (strings ./Admin.dll) Gary Flynn (Tue Sep 18 2001 - 17:36:07 CDT)
• Re: Concept Virus(CV) V.5 - Quick analysis update Homer Wilson Smith (Tue Sep 18 2001 - 19:05:50 CDT)
• nimda still alive - no timer? Thomas Roessler (Tue Sep 18 2001 - 19:29:31 CDT)
• RE: New worm segfaults apache Chris Arnold (Tue Sep 18 2001 - 16:37:24 CDT)
• RE: New worm segfaults apache robhklasp.com.au (Tue Sep 18 2001 - 20:04:54 CDT)
• RE: Nimda Probes Stopped Andrew Blevins (Tue Sep 18 2001 - 17:36:42 CDT)
• Upgrading IE detects Nimda ? Sean Kelly (Tue Sep 18 2001 - 17:35:12 CDT)
• Superkay.com:888 Richard Bradford (Tue Sep 18 2001 - 18:44:07 CDT)
• Nimda mostly infects /8-locally. Thomas Roessler (Tue Sep 18 2001 - 19:09:31 CDT)
• Re: Concept Virus(CV) V.5 - Quick analysis update Michael H. Warfield (Tue Sep 18 2001 - 20:46:19 CDT)
• Re: CodeBlue finally hitting, or what? Nick FitzGerald (Tue Sep 18 2001 - 17:33:45 CDT)
• Re: Concept Virus(CV) V.5 - Advisory and Quick analysis Michael H. Warfield (Tue Sep 18 2001 - 20:10:58 CDT)
• RE: nimda tries to send mail after reboot Don Weber (Tue Sep 18 2001 - 20:29:51 CDT)
• Re(2): Nimda Probes Stopped Ken Eichman (Tue Sep 18 2001 - 18:14:22 CDT)
• Re: New "concept" virus/worm? Nick FitzGerald (Tue Sep 18 2001 - 18:28:13 CDT)
• Re: Nimda Probes Stopped Stuart Staniford (Tue Sep 18 2001 - 19:36:26 CDT)
• Our sumary of the NIMDA (CV) worm Bob Todd (Tue Sep 18 2001 - 20:28:26 CDT)
• Re: WORM FORENSICS? Gabriel Wachman (Tue Sep 18 2001 - 19:26:07 CDT)
• Re: NIMDA has a built in timer? No hits lately Mike Baptiste (Tue Sep 18 2001 - 20:33:14 CDT)
• RE: Nimda Probes Stopped Jonathan Rickman (Tue Sep 18 2001 - 21:02:41 CDT)
• RE: nimda tries to send mail after reboot Jim Forster (Tue Sep 18 2001 - 21:47:20 CDT)
• Massive Internet Worm Attack Timed to Match Terrorist Bombing One Week Ago Internet Security Bulletin (Tue Sep 18 2001 - 21:34:47 CDT)
• RE: Nimda Worm Mitigation Jason Lewis (Tue Sep 18 2001 - 21:52:33 CDT)
• Re: RE: Admin.dll (strings ./Admin.dll) Steve Hoult (Tue Sep 18 2001 - 21:43:25 CDT)
• Re: Superkay.com:888 sanghun (Tue Sep 18 2001 - 21:52:47 CDT)
• riched20.dll aleph1securityfocus.com (Tue Sep 18 2001 - 23:17:31 CDT)
• Re: New "concept" virus/worm? Jim (Tue Sep 18 2001 - 22:12:37 CDT)
• Nimda and samba, chap II (20010531?) Chip Mefford (Tue Sep 18 2001 - 23:21:02 CDT)
• RE: Superkay.com:888 Dave Hart (Tue Sep 18 2001 - 21:58:01 CDT)
• Re: Nimda mostly infects /8-locally. Bryan Andersen (Tue Sep 18 2001 - 22:40:47 CDT)
• W32.Nimda Infecting Executables !!!! :-( Owen Creger (Tue Sep 18 2001 - 22:01:36 CDT)
• Corrupted IE with nimda virus Chris Thornberry (Tue Sep 18 2001 - 22:20:04 CDT)
• MIME type of readme.eml (was Re: New "concept" virus/worm? Rob Quinn (Wed Sep 19 2001 - 00:25:20 CDT)
• RE: Concept Virus(CV) V.5 - Advisory and Quick analysis Mark Challender (Tue Sep 18 2001 - 12:50:33 CDT)
• Re: MIME type of readme.eml (was Re: New "concept" virus/worm? Henrik Pedersen (Wed Sep 19 2001 - 01:21:47 CDT)
• RE: Nimda Worm Mitigation: Snort Kain X (Wed Sep 19 2001 - 01:26:11 CDT)
• Re: New worm segfaults apache Sean Chittenden (Wed Sep 19 2001 - 04:23:17 CDT)
• W32.Nimda disassembly/analysis vitalysli.mine.nu (Wed Sep 19 2001 - 03:45:54 CDT)
• the better worm tutorial Roelof (Wed Sep 19 2001 - 06:05:34 CDT)
• Nimda - Local Privilege escalation? ross_bushbycardinal.co.uk (Wed Sep 19 2001 - 07:23:50 CDT)
• Re: New worm segfaults apache bugtraq (Wed Sep 19 2001 - 03:41:22 CDT)
• RE: Concept Virus(CV) V.5 - Advisory and Quick analysis Davis, Matt (Wed Sep 19 2001 - 07:01:46 CDT)
• New worm attacking MS DNS servers? Sean Kelly (Wed Sep 19 2001 - 05:50:48 CDT)
• Nimda repair problems Steve Cody (Wed Sep 19 2001 - 10:04:40 CDT)
• Nimda - collected information Berislav Kucan (Wed Sep 19 2001 - 08:14:00 CDT)
• Worm Watch John Thornton (Wed Sep 19 2001 - 08:44:55 CDT)
• Nimda infecting executables Johannes Verelst (Wed Sep 19 2001 - 08:28:30 CDT)
• RE: W32.Nimda Infecting Executables !!!! :-( Steve Halligan (Wed Sep 19 2001 - 09:56:58 CDT)
• nimda modem activity? George Bakos (Wed Sep 19 2001 - 10:49:11 CDT)
• Nimda affecting Linux? George Taylor (Wed Sep 19 2001 - 10:24:38 CDT)
• RE: Nimda Probes Stopped Robert Nieuwhof (Wed Sep 19 2001 - 09:55:12 CDT)
• Re: Nimda infecting executables Gokulnath (Wed Sep 19 2001 - 11:10:06 CDT)
• RE: Anyone????? FW: Concept Virus(CV) V.5 - Quick analysis update George Milliken (Wed Sep 19 2001 - 08:59:10 CDT)
• Web site infected by Nimda acz [iSecureLabs] (Sun Sep 19 1999 - 10:46:14 CDT)
• Re: Nimda and samba, chap II (20010531?) Kris Carlier (Wed Sep 19 2001 - 07:34:55 CDT)
• Microsoft advisory John Ellingsworth (Wed Sep 19 2001 - 10:52:30 CDT)
• concept virus Burak DAYIOGLU (Wed Sep 19 2001 - 07:25:13 CDT)
• Re: the better worm tutorial Allen Smith (Wed Sep 19 2001 - 11:02:02 CDT)
• NIMDA Removal Isherwood Jeff C Contr AFRL/IFOSS (Wed Sep 19 2001 - 09:48:15 CDT)
• RE: W32.Nimda Infecting Executables !!!! :-( Royans Tharakan (Wed Sep 19 2001 - 11:26:42 CDT)
• Re: Nimda Worm Sam Ferrell (Wed Sep 19 2001 - 11:31:05 CDT)
• RE: Nimda repair problems Tom Smit (Wed Sep 19 2001 - 11:42:32 CDT)
• Re: NIMDA Removal Johannes Verelst (Wed Sep 19 2001 - 12:04:42 CDT)
• RE: Web site infected by Nimda Jac Engel (Wed Sep 19 2001 - 12:07:22 CDT)
• Re: nimda tries to send mail after reboot Brett Glass (Wed Sep 19 2001 - 12:13:30 CDT)
• RE: nimda tries to send mail after reboot Andrew Mulholland (Wed Sep 19 2001 - 12:24:39 CDT)
• RE: Web site infected by Nimda Ken Pfeil (Wed Sep 19 2001 - 12:44:31 CDT)
• RE: Web site infected by Nimda John Q. Public (Wed Sep 19 2001 - 12:25:24 CDT)
• RE: New worm attacking MS DNS servers? Tony Mason (Wed Sep 19 2001 - 13:08:14 CDT)
• RE: Nimda Probes Stopped Jeff Peterson (Wed Sep 19 2001 - 13:12:21 CDT)
• RE: Nimda Worm Sam Ferrell (Wed Sep 19 2001 - 13:54:33 CDT)
• RE: nimda tries to send mail after reboot Lists (Wed Sep 19 2001 - 14:40:38 CDT)
• Nimda Poison Pill Blaine Kubesh (Wed Sep 19 2001 - 14:26:17 CDT)
• RE: Anyone????? FW: Concept Virus(CV) V.5 - Quick analysis update Michael Halls (Wed Sep 19 2001 - 15:21:20 CDT)
• Nimda Probes by Hour Bryan Andersen (Wed Sep 19 2001 - 14:48:33 CDT)
• Please tell me I'm wrong: microsoft.com infected Steve Cody (Wed Sep 19 2001 - 14:37:39 CDT)
• Re: Nimda Poison Pill ThorHammerofGod.com (Wed Sep 19 2001 - 15:27:01 CDT)
• Re: Please tell me I'm wrong: microsoft.com infected Benjamin Franz (Wed Sep 19 2001 - 17:01:32 CDT)
• Re: nimda tries to send mail after reboot Michael H. Warfield (Wed Sep 19 2001 - 16:22:00 CDT)
• Re: MIME type of readme.eml (was Re: Web site infected by Nimda Rob Quinn (Wed Sep 19 2001 - 14:52:03 CDT)
• Side Affect of the new worm: HD fills up Stanley G. Bubrouski (Wed Sep 19 2001 - 14:29:34 CDT)
• RE: Please tell me I'm wrong: microsoft.com infected Brian Morin (Wed Sep 19 2001 - 16:55:20 CDT)
• Re: Please tell me I'm wrong: microsoft.com infected Rodrigo Goya (Wed Sep 19 2001 - 15:59:25 CDT)
• Re: Please tell me I'm wrong: microsoft.com infected Jay D. Dyson (Wed Sep 19 2001 - 17:02:43 CDT)
• Re: Please tell me I'm wrong: microsoft.com infected Michael H. Warfield (Wed Sep 19 2001 - 16:54:03 CDT)
• RE: Please tell me I'm wrong: microsoft.com infected jmillerrhythms.net (Wed Sep 19 2001 - 17:13:39 CDT)
• RE: Please tell me I'm wrong: microsoft.com infected Ken Pfeil (Wed Sep 19 2001 - 17:27:51 CDT)
• Re: Please tell me I'm wrong: microsoft.com infected Rodrigo Goya (Wed Sep 19 2001 - 16:31:02 CDT)
• RE: Please tell me I'm wrong: microsoft.com infected jmillerrhythms.net (Wed Sep 19 2001 - 17:28:25 CDT)
• Re: Please tell me I'm wrong: microsoft.com infected Nick FitzGerald (Wed Sep 19 2001 - 17:31:51 CDT)
• Re: Please tell me I'm wrong: microsoft.com infected Jon Zobrist (Wed Sep 19 2001 - 17:17:25 CDT)
• RE: Please tell me I'm wrong: microsoft.com infected Craig Humphrey (Wed Sep 19 2001 - 17:22:34 CDT)
• RE: Please tell me I'm wrong: microsoft.com infected Boyan Krosnov (Wed Sep 19 2001 - 17:53:38 CDT)
• Re: Please tell me I'm wrong: microsoft.com infected Johannes Verelst (Wed Sep 19 2001 - 17:49:50 CDT)
• RE: Please tell me I'm wrong: microsoft.com infected Dave Hart (Wed Sep 19 2001 - 18:08:11 CDT)
• RE: Nimda Apache RedirectMatch results David Leitko (Wed Sep 19 2001 - 18:31:53 CDT)
• Mutex ThorHammerofGod.com (Wed Sep 19 2001 - 18:34:00 CDT)
• RE: Anyone????? FW: Concept Virus(CV) V.5 - Quick analysis updat e John Coke (Wed Sep 19 2001 - 19:17:39 CDT)
• Re: MIME type of readme.eml (was Re: Web site infected by Nimda Nick FitzGerald (Wed Sep 19 2001 - 19:56:08 CDT)
• FW: Nimda Worm Mitigation Jason Lewis (Wed Sep 19 2001 - 21:32:54 CDT)
• RE: Please tell me I'm wrong: microsoft.com infected David LeBlanc (Wed Sep 19 2001 - 22:07:15 CDT)
• Apache rewrite rules and error msgs & Nimda Chris Stephens (Wed Sep 19 2001 - 22:57:58 CDT)
• Recovery documentation Tina Bird (Wed Sep 19 2001 - 21:15:57 CDT)
• Detailed Nimda Analysis Report Jensenne Roculan (Thu Sep 20 2001 - 01:33:29 CDT)
• Re: nimda subject line Thomas Roessler (Thu Sep 20 2001 - 03:44:07 CDT)
• Concept Virus/Nimda sendmail-filter. Jonas Stahre (Thu Sep 20 2001 - 01:32:50 CDT)
• Loopback traffic on the net Sven Carstens (Thu Sep 20 2001 - 05:50:01 CDT)
• MS denys Nimda infection John Conover (Thu Sep 20 2001 - 04:56:34 CDT)
• nimda subject line Thomas Roessler (Thu Sep 20 2001 - 03:38:09 CDT)
• [GFISEC] Nimda worm analysis Sandro Gauci (Thu Sep 20 2001 - 04:38:46 CDT)
• NIMDA Removal Isherwood Jeff C Contr AFRL/IFOSS (Thu Sep 20 2001 - 11:14:30 CDT)
• Re: MIME type of readme.eml (was Re: Web site infected by Nimda Rob Quinn (Thu Sep 20 2001 - 12:22:01 CDT)
• McAfee Stand-alone removal tool Tina Bird (Thu Sep 20 2001 - 12:26:04 CDT)
• Re: New worm segfaults apache Marc Slemko (Thu Sep 20 2001 - 23:12:05 CDT)
• New Version of Retina Nimba Scanner info (Thu Sep 20 2001 - 19:31:06 CDT)
• Port 6635 Craig, Scott (Fri Sep 21 2001 - 07:27:09 CDT)
• Nimda on Mac? johan.augustssonadm.gu.se (Fri Sep 21 2001 - 05:22:22 CDT)
• IE 5.5 SP2 incident Jose Romeo Vela (Fri Sep 21 2001 - 08:48:44 CDT)
• Symantec Security Response - W32.Nimda.Amm Removal Tool Owen Creger (Fri Sep 21 2001 - 10:27:32 CDT)
• Re: Nimda on Mac? Kee Hinckley (Fri Sep 21 2001 - 11:24:47 CDT)
• Yet Another Nimda Thread (YANT) Portnoy, Gary (Fri Sep 21 2001 - 11:46:50 CDT)
• Re: Port 6635 Matthew Leeds (Fri Sep 21 2001 - 11:45:32 CDT)
• Re: Yet Another Nimda Thread (YANT) Midnight Ryder (Fri Sep 21 2001 - 12:23:32 CDT)
• RE: Yet Another Nimda Thread (YANT) Robert Nieuwhof (Fri Sep 21 2001 - 12:02:15 CDT)
• Re: Yet Another Nimda Thread (YANT) hvdkooijvanderkooij.org (Fri Sep 21 2001 - 12:30:36 CDT)
• RE: Yet Another Nimda Thread (YANT) Andrew Blevins (Fri Sep 21 2001 - 11:53:16 CDT)
• Re: Nimda affecting HP LaserJet / JetDirect devices? Michael W. Shaffer (Fri Sep 21 2001 - 12:59:42 CDT)
• RE:New Version of Retina Nimba Scanner John Stauffacher (Fri Sep 21 2001 - 12:13:08 CDT)
• Re: Yet Another Nimda Thread (YANT) Bryan Andersen (Fri Sep 21 2001 - 13:15:13 CDT)
• Nimda affecting HP LaserJet / JetDirect devices? Michael W. Shaffer (Fri Sep 21 2001 - 12:36:20 CDT)
• RE: Yet Another Nimda Thread (YANT) Jose Nazario (Fri Sep 21 2001 - 13:22:52 CDT)
• Nimda probes from way off IP addresses Steve Cody (Fri Sep 21 2001 - 13:20:52 CDT)
• Re: Yet Another Nimda Thread (YANT) Tracey Losco (Fri Sep 21 2001 - 12:43:56 CDT)
• Re: Yet Another Nimda Thread (YANT) Mike Lewinski (Fri Sep 21 2001 - 14:15:03 CDT)
• Re: Nimda on Mac? Zora Monster (Fri Sep 21 2001 - 13:56:59 CDT)
• Re: nimda subject line Eric Chien (Fri Sep 21 2001 - 15:13:07 CDT)
• RE: Nimda affecting HP LaserJet / JetDirect devices? Richard.Grantmail.state.ky.us (Fri Sep 21 2001 - 14:42:07 CDT)
• RE: New Version of Retina Nimba Scanner bparissorrentolactalis.com (Fri Sep 21 2001 - 15:09:41 CDT)
• Re: Nimda probes from way off IP addresses Brett Glass (Fri Sep 21 2001 - 15:31:01 CDT)
• Re: Nimda affecting HP LaserJet / JetDirect devices? Florian Weimer (Fri Sep 21 2001 - 16:08:58 CDT)
• Re: Yet Another Nimda Thread (YANT) Florian Weimer (Fri Sep 21 2001 - 16:17:12 CDT)
• RE: Nimda affecting HP LaserJet / JetDirect devices? auto241065hushmail.com (Fri Sep 21 2001 - 20:02:35 CDT)
• Using NBAR to stop your users from geting Nimda from a web page Antonio Vasconcelos (Fri Sep 21 2001 - 22:59:07 CDT)
• Re: Nimda affecting HP LaserJet / JetDirect devices? Trey Valenta (Sat Sep 22 2001 - 15:26:14 CDT)
• Strange traffic .... Elie De Brauwer (Sat Sep 22 2001 - 02:25:02 CDT)
• RE: Nimda affecting HP LaserJet / JetDirect devices? Nick FitzGerald (Sun Sep 23 2001 - 11:35:38 CDT)
• Re: Using NBAR to stop your users from geting Nimda from a web page Trevor (Sat Sep 22 2001 - 23:21:46 CDT)
• Re: Yet Another Nimda Thread (YANT) Bryan Andersen (Sat Sep 22 2001 - 21:58:03 CDT)
• Re: Strange traffic .... Paul Gear (Sat Sep 22 2001 - 23:01:44 CDT)
• Re: Strange traffic .... John Sage (Sat Sep 22 2001 - 23:34:56 CDT)
• Re: New book worth taking a look at Liming Tsai (Sun Sep 23 2001 - 12:02:38 CDT)
• New book worth taking a look at Alfred Huger (Sun Sep 23 2001 - 09:28:18 CDT)
• Re: Using NBAR to stop your users from geting Nimda from a web page Antonio Vasconcelos (Sun Sep 23 2001 - 12:50:52 CDT)
• Re: IE 5.5 SP2 incident Lars Gaarden (Mon Sep 24 2001 - 05:04:30 CDT)
• Re: Using NBAR to stop your users from geting Nimda from a web page Jeff Kell (Sun Sep 23 2001 - 14:59:44 CDT)
• Re: Nimda affecting HP LaserJet / JetDirect devices? johan.augustssonadm.gu.se (Mon Sep 24 2001 - 09:32:12 CDT)
• Re: Strange traffic .... (final) Elie De Brauwer (Mon Sep 24 2001 - 10:10:24 CDT)
• Re: IE 5.5 SP2 incident Jose Romeo Vela (Mon Sep 24 2001 - 10:39:17 CDT)
• Tracking down the still infected hosts Darren Windham (Mon Sep 24 2001 - 10:56:50 CDT)
• RE: Tracking down the still infected hosts Martinez, Simon (Mon Sep 24 2001 - 11:14:18 CDT)
• Re: Tracking down the still infected hosts Mike Lewinski (Mon Sep 24 2001 - 11:29:12 CDT)
• New Virus (TROJ_VOTE.A) bonkwebchat.chatsystems.com (Mon Sep 24 2001 - 15:18:26 CDT)
• TROJ_VOTE.A (WTC.EXE) bonkwebchat.chatsystems.com (Mon Sep 24 2001 - 16:26:29 CDT)
• RE: TROJ_VOTE.A (WTC.EXE) Fisher, Lee (Mon Sep 24 2001 - 17:12:32 CDT)
• RE: Tracking down the still infected hosts Fulton L. Preston Jr. (Mon Sep 24 2001 - 21:00:53 CDT)
• RE: Tracking down the still infected hosts Ryan McDonnell (Tue Sep 25 2001 - 00:26:26 CDT)
• Re: Tracking down the still infected hosts Kyle R. Hofmann (Tue Sep 25 2001 - 01:42:31 CDT)
• Hacked using vulnerable FTP daemon. Paul Tan (Tue Sep 25 2001 - 01:43:03 CDT)
• Nimda and others filter for apache venomous (Tue Sep 25 2001 - 06:20:17 CDT)
• RE: New Version of Retina Nimba Scanner Marc Maiffret (Tue Sep 25 2001 - 09:43:27 CDT)
• Re: Hacked using vulnerable FTP daemon. Patrick Andry (Tue Sep 25 2001 - 11:04:19 CDT)
• Re: Tracking down the still infected hosts Tina Bird (Tue Sep 25 2001 - 11:24:49 CDT)
• RE: Tracking down the still infected hosts Fulton L. Preston Jr. (Tue Sep 25 2001 - 14:04:27 CDT)
• Re: Tracking down the still infected hosts Neil Dickey (Tue Sep 25 2001 - 13:58:29 CDT)
• Re: Hacked using vulnerable FTP daemon. Bojan Zdravkovic (Tue Sep 25 2001 - 14:28:46 CDT)
• Re: Tracking down the still infected hosts Skip Carter (Tue Sep 25 2001 - 14:54:11 CDT)
• Re: Tracking down the still infected hosts Kyle R. Hofmann (Tue Sep 25 2001 - 14:28:49 CDT)
• Re: Hacked using vulnerable FTP daemon. Jose Nazario (Tue Sep 25 2001 - 15:27:37 CDT)
• Re: Tracking down the still infected hosts Dale Lancaster (Tue Sep 25 2001 - 15:34:37 CDT)
• Re: Tracking down the still infected hosts Ryan Russell (Tue Sep 25 2001 - 16:01:10 CDT)
• Re: Tracking down the still infected hosts Duncan Hill (Tue Sep 25 2001 - 16:05:53 CDT)
• Re: Tracking down the still infected hosts Josh Burroughs (Tue Sep 25 2001 - 18:00:30 CDT)
• rpc.statd root on a Redhat 7.0 box.... Anthony Baratta (Tue Sep 25 2001 - 21:32:29 CDT)
• Re: Hacked using vulnerable FTP daemon. -- next steps Paul Tan (Tue Sep 25 2001 - 21:26:33 CDT)
• Re: Tracking down the still infected hosts Nicole Haywood (Tue Sep 25 2001 - 20:03:24 CDT)
• Vacation Troller, Please Ignore. Jensenne Roculan (Wed Sep 26 2001 - 01:26:09 CDT)
• Re: Hacked using vulnerable FTP daemon. Paul Tan (Wed Sep 26 2001 - 02:42:55 CDT)
• RV: packets in my network Sergio Candelas Noriega (Wed Sep 26 2001 - 02:42:11 CDT)
• AW: Hacked using vulnerable FTP daemon. vogthansenet.com (Wed Sep 26 2001 - 04:08:53 CDT)
• RE: packets in my network Palmer, Justin (Wed Sep 26 2001 - 10:42:49 CDT)
• Retina-Nimda Scanner detects Win9x as infected... Perlovsky, Boris (Wed Sep 26 2001 - 14:28:45 CDT)
• RE: Retina-Nimda Scanner detects Win9x as infected... Stephen Villano (Wed Sep 26 2001 - 14:39:22 CDT)
• RE: Retina-Nimda Scanner detects Win9x as infected... Marc Maiffret (Wed Sep 26 2001 - 16:40:20 CDT)
• pubdestroyer2001.exe via anonymous FTP? Mike Shaw (Thu Sep 27 2001 - 10:41:45 CDT)
• Re: pubdestroyer2001.exe via anonymous FTP? Patrick Andry (Thu Sep 27 2001 - 11:47:22 CDT)
• Nimda et.al. versus ISP responsibility Luc Pardon (Thu Sep 27 2001 - 11:50:14 CDT)
• RE: Nimda et.al. versus ISP responsibility John Campbell (Thu Sep 27 2001 - 12:53:35 CDT)
• Re: Nimda et.al. versus ISP responsibility Chip McClure (Thu Sep 27 2001 - 12:59:49 CDT)
• JRun 3.0 SP2 Vulnerability?? Kerry Steele (Thu Sep 27 2001 - 13:01:04 CDT)
• RE: Nimda et.al. versus ISP responsibility Adcock, Matt (Thu Sep 27 2001 - 12:57:29 CDT)
• Re: [RE: Nimda et.al. versus ISP responsibility] Greg Dotoli (Thu Sep 27 2001 - 14:38:28 CDT)
• Re: Nimda et.al. versus ISP responsibility Neil Dickey (Thu Sep 27 2001 - 13:59:10 CDT)
• RE:Nimda et.al. versus ISP responsibility ---> a few thoughts Marc Ducharme (Thu Sep 27 2001 - 13:34:23 CDT)
• RE: Nimda et.al. versus ISP responsibility Michael B. Morell (Thu Sep 27 2001 - 13:27:24 CDT)
• RE: Nimda et.al. versus ISP responsibility Tracy Martin (Thu Sep 27 2001 - 13:25:35 CDT)
• Re: Nimda et.al. versus ISP responsibility John Oliver (Thu Sep 27 2001 - 13:10:56 CDT)
• Re: Nimda et.al. versus ISP responsibility Rich Puhek (Thu Sep 27 2001 - 15:02:46 CDT)
• RE: pubdestroyer2001.exe via anonymous FTP? Slivkoff, Michael M (Thu Sep 27 2001 - 13:48:53 CDT)
• Second wave of Nimda? Tracey Losco (Thu Sep 27 2001 - 14:26:01 CDT)
• Re: JRun 3.0 SP2 Vulnerability?? Jason Robertson (Thu Sep 27 2001 - 15:14:01 CDT)
• Re: Nimda et.al. versus ISP responsibility geoff (Thu Sep 27 2001 - 15:08:40 CDT)
• RE:Nimda et.al. versus ISP responsibility ---> a few thoughts Bill_Roydspch.gc.ca (Thu Sep 27 2001 - 15:14:23 CDT)
• RE: pubdestroyer2001.exe via anonymous FTP? Chip McClure (Thu Sep 27 2001 - 15:18:45 CDT)
• RE: Nimda et.al. versus ISP responsibility Dave Salovesh (Thu Sep 27 2001 - 15:06:41 CDT)
• Re: [RE: Nimda et.al. versus ISP responsibility] Jason Robertson (Thu Sep 27 2001 - 15:32:15 CDT)
• RE: Nimda et.al. versus ISP responsibility Homer Wilson Smith (Thu Sep 27 2001 - 15:17:00 CDT)
• Re: Second wave of Nimda? John Oliver (Thu Sep 27 2001 - 15:37:26 CDT)
• RE: Nimda et.al. versus ISP responsibility UMusBKidNaol.com (Thu Sep 27 2001 - 15:40:52 CDT)
• RE: pubdestroyer2001.exe via anonymous FTP? Benninghoff, John (Thu Sep 27 2001 - 15:38:34 CDT)
• RE: Nimda et.al. versus ISP responsibility Mogull,Rich (Thu Sep 27 2001 - 16:05:39 CDT)
• Re: Second wave of Nimda? Jensenne Roculan (Thu Sep 27 2001 - 16:10:54 CDT)
• RE: Nimda et.al. versus ISP responsibility ahowardnoerrors.com (Thu Sep 27 2001 - 16:10:50 CDT)
• Re: Nimda et.al. versus ISP responsibility robertmaustin.ibm.com (Thu Sep 27 2001 - 16:09:39 CDT)
• RE: Nimda et.al. versus ISP responsibility Stephen Villano (Thu Sep 27 2001 - 16:18:48 CDT)
• RE: Nimda et.al. versus ISP responsibility Chad Mawson (Thu Sep 27 2001 - 16:47:02 CDT)
• RE: Nimda et.al. versus ISP responsibility Jason Robertson (Thu Sep 27 2001 - 17:07:20 CDT)
• RE: Second wave of Nimda? Megyesi, Heather (Thu Sep 27 2001 - 15:17:03 CDT)
• RE: Nimda et.al. versus ISP responsibility UMusBKidNaol.com (Thu Sep 27 2001 - 15:40:10 CDT)
• RE:Nimda et.al. versus ISP responsibility ---> a few thoughts Kee Hinckley (Thu Sep 27 2001 - 15:33:09 CDT)
• Nimda et.al. versus ISP responsibility - Laying responsibility where it belongs Fred Cohen (Thu Sep 27 2001 - 17:54:47 CDT)
• Re: Nimda et.al. versus ISP responsibility Brian Cervenka (Thu Sep 27 2001 - 17:56:28 CDT)
• RE: Nimda et.al. versus ISP responsibility Tony Langdon (Thu Sep 27 2001 - 18:31:45 CDT)
• RE: Nimda et.al. versus ISP responsibility ---> a few thoughts Alejandro Mezcua (Thu Sep 27 2001 - 18:05:14 CDT)
• Re: Nimda et.al. versus ISP responsibility terry white (Thu Sep 27 2001 - 18:29:42 CDT)
• RE: Nimda et.al. versus ISP responsibility Greg A. Woods (Thu Sep 27 2001 - 18:41:55 CDT)
• RE: Nimda et.al. versus ISP responsibility - Laying responsibilit y where it belongs Silcock, Stephen (Thu Sep 27 2001 - 18:38:51 CDT)
• FBI Virus Alerts twistsiwthushmail.com (Thu Sep 27 2001 - 12:03:26 CDT)
• RE: Nimda et.al. versus ISP responsibility Jay D. Dyson (Thu Sep 27 2001 - 19:01:23 CDT)
• RE: Nimda et.al. versus ISP responsibility Dean Cunningham (Thu Sep 27 2001 - 19:25:25 CDT)
• Re: FBI Virus Alerts H C (Thu Sep 27 2001 - 19:39:21 CDT)
• RE: Nimda et.al. versus ISP responsibility Jonathan Levy (Thu Sep 27 2001 - 19:34:28 CDT)
• Re: FBI Virus Alerts Big Woz (Thu Sep 27 2001 - 19:38:59 CDT)
• Re: FBI Virus Alerts H C (Thu Sep 27 2001 - 20:29:05 CDT)
• RE: Nimda et.al. versus ISP responsibility ahowardnoerrors.com (Thu Sep 27 2001 - 21:13:41 CDT)
• Re: pubdestroyer2001.exe via anonymous FTP? Kevin Reardon (Thu Sep 27 2001 - 20:39:26 CDT)
• Nimda esponsibility - Laying appropriatel - implied warranty of sale Fred Cohen (Thu Sep 27 2001 - 22:52:31 CDT)
• Re: Red Cross Fraud: NOT Firehose (Thu Sep 27 2001 - 23:03:22 CDT)
• Lots and lots of DNS lookups and increased number of /default.ida?XXXXXXXXXXXXXXXXXXXXXXXX...s Fred Cohen (Thu Sep 27 2001 - 23:04:44 CDT)
• Re: Lots and lots of DNS lookups and increased number of /default.ida?XXXXXXXXXXXXXXXXXXXXXXXX...s Tracey A. Losco (Thu Sep 27 2001 - 23:39:34 CDT)
• Re: Lots and lots of DNS lookups and increased number of /default.ida?XXXXXXXXXXXXXXXXXXXXXXXX...s Bugger Bugtraq (Fri Sep 28 2001 - 00:50:33 CDT)
• Re: Lots and lots of DNS lookups and increased number of /default.ida?XXXXXXXXXXXXXXXXXXXXXXXX...s John Conover (Thu Sep 27 2001 - 23:43:59 CDT)
• Re: FBI Virus Alerts info (Fri Sep 28 2001 - 01:38:07 CDT)
• RE: Nimda et.al. versus ISP responsibility Smith, Mark (Fri Sep 28 2001 - 02:36:08 CDT)
• Re: Nimda esponsibility - Laying appropriatel - implied warranty of sale namoratt.net (Fri Sep 28 2001 - 07:32:14 CDT)
• VIRUS Riddled MIRC program? Brian Heathfield (Fri Sep 28 2001 - 09:20:20 CDT)
• Re: Nimda esponsibility - Laying appropriatel - implied warranty of sale H C (Fri Sep 28 2001 - 09:29:40 CDT)
• Re: Nimda esponsibility - Laying appropriatel - implied warranty of sale fosterd  (Fri Sep 28 2001 - 09:39:18 CDT)
• Re: Nimda et.al. versus ISP responsibility - Laying responsibility where it belongs Neil Dickey (Fri Sep 28 2001 - 10:54:51 CDT)
• Re: Nimda esponsibility - Laying appropriatel - implied warranty of sale Chip Mefford (Fri Sep 28 2001 - 11:44:48 CDT)
• Dead Thread - Nimda et.al. versus ISP responsibility Jensenne Roculan (Fri Sep 28 2001 - 12:09:04 CDT)
• Re: Nimda esponsibility - Laying appropriatel - implied warranty of sale Jay D. Dyson (Fri Sep 28 2001 - 12:30:18 CDT)
• RE: FBI Virus Alerts Krul Thomas (Fri Sep 28 2001 - 13:15:15 CDT)
• RE: Lots and lots of DNS lookups and increased number of /default .ida?XXXXXXXXXXXXXXXXXXXXXXXX...s Kinsey, Robert (Fri Sep 28 2001 - 13:10:21 CDT)
• Syn packets hitting port 80, not webserver Neil Dickey (Fri Sep 28 2001 - 13:23:31 CDT)
• Re: Syn packets hitting port 80, not webserver Matthew Leeds (Fri Sep 28 2001 - 14:17:34 CDT)
• re: Syn packets hitting port 80, not webserver Xno Xutz (Fri Sep 28 2001 - 14:56:05 CDT)
• Re: Syn packets hitting port 80, not webserver Neil Dickey (Fri Sep 28 2001 - 15:30:01 CDT)
• ssh scans Chad Mawson (Fri Sep 28 2001 - 15:42:52 CDT)
• Re: ssh scans Heather Adkins (Fri Sep 28 2001 - 16:04:09 CDT)
• Re: ssh scans Matthew Leeds (Fri Sep 28 2001 - 16:20:31 CDT)
• RE: FBI Virus Alerts Eaton, Arthur (Fri Sep 28 2001 - 17:04:11 CDT)
• RE: FBI Virus Alerts Kinsey, Robert (Fri Sep 28 2001 - 17:47:30 CDT)
• Re: Syn packets hitting port 80, not webserver Greg A. Woods (Fri Sep 28 2001 - 18:48:42 CDT)
• Re: Hacked using vulnerable FTP daemon. Ben McGinnes (Fri Sep 28 2001 - 19:44:00 CDT)
• Re: FBI Virus Alerts David Kennedy CISSP (Fri Sep 28 2001 - 21:21:08 CDT)
• Re: FBI Virus Alerts Chris Salter (Sat Sep 29 2001 - 06:14:13 CDT)
• Code Red Specifics H C (Sat Sep 29 2001 - 08:42:40 CDT)
• Re: FBI Virus Alerts info (Sat Sep 29 2001 - 14:43:11 CDT)
• Re: Code Red Specifics Valdis.Kletnieksvt.edu (Sat Sep 29 2001 - 22:39:49 CDT)
• Re: FBI Virus Alerts Gary Maltzen (Sun Sep 30 2001 - 11:36:32 CDT)
• slowing down the spread of worms Nathan W. Labadie (Sun Sep 30 2001 - 16:33:20 CDT)
• RE: slowing down the spread of worms Rob Keown (Sun Sep 30 2001 - 18:57:44 CDT)
• WARNING: Trojan Horse Disguised as Message from SecurityFocus and TrendMicro aleph1securityfocus.com (Sun Sep 30 2001 - 21:47:58 CDT)

Last message date: Sun Sep 30 2001 - 22:00:12 CDT
Archived on: Sun Sep 30 2001 - 22:00:15 CDT