|
Make sure the computer is off line until you get the patches applied -
learned this through hard experience!
At 03:11 PM 11/1/2001 -0500, you wrote:
>Very frustrating. bard.cal.msu.edu is my box. It was hit by nimda in
september.
>It was formatted and reloaded from a sept 8 backup, fully patched
according to
>microsoft downloads and yet it has been exploited again. I am obviously
missing
>something but I don't know what. I had noticed unusual activity and had
the box
>off the wire before Gene's email went out. I was probed by 210.178.12.111 and
>35.8.195.55 but my log shows 404's so I don't know how the heck they got in.
>Any help in buttoning this up would be much appreciated.
>
>
>Michael Hoxsey
>Network Admin
>Arts and Letters
>
Cheryl
Cheryl Akers, MS, CNA - [log in to unmask]
Microcomputer Support - Microbiology and Molecular Genetics
153 Giltner
Michigan State University
East Lansing, MI 48824
517-355-8406
|
