![](https://seccdn.libravatar.org/avatar/5a94d2f8a5845d5f1c1ea1556fc0cb72.jpg?s=120&d=mm&r=g)
Francesco Scaglioni wrote:
Hi,
This laptop usually gets mail via network from behind a firewall. Earlier this evening I plugged it into a phone line and used balsa to bring down mail (quicker than fetchmail on dial up). I have just found the following in httpd error_log ( see below ). Is this a w32 virus trying to do something that I am seeing?
Cheers
Francesco
Tue Sep 18 18:36:17 2001] [error] [client 194.74.208.164] File does not exist: /usr/local/httpd/htdocs/scripts/root.exe [Tue Sep 18 18:36:50 2001] [error] [client 195.224.200.138] File does not exist: /usr/local/httpd/htdocs/scripts/root.exe [Tue Sep 18 18:36:51 2001] [error] [client 195.224.200.138] File does not exist: /usr/local/httpd/htdocs/MSADC/root.exe [Tue Sep 18 18:36:51 2001] [error] [client 194.74.208.164] File does not exist: /usr/local/httpd/htdocs/MSADC/root.exe [Tue Sep 18 18:36:51 2001] [error] [client 195.224.200.138] File does not exist: /usr/local/httpd/htdocs/c/winnt/system32/cmd.exe
It's called the Nimda worm. http://www.sarc.com/avcenter/venc/data/w32.nimda.a@mm.html -- Joe & Sesil Morris New Tribes Mission Email Address: Joe_Morris@ntm.org Web Address: www.mydestiny.net/~joe_morris "All I have seen teaches me to trust the Creator for all I have not seen." --Ralph Waldo Emerson