From owner-freebsd-stable  Tue Sep 18 21:38:23 2001
Delivered-To: freebsd-stable@freebsd.org
Received: from web20108.mail.yahoo.com (web20108.mail.yahoo.com [216.136.226.45])
	by hub.freebsd.org (Postfix) with SMTP id F0E5B37B40A
	for <freebsd-stable@FreeBSD.org>; Tue, 18 Sep 2001 21:38:20 -0700 (PDT)
Message-ID: <20010919043819.45703.qmail@web20108.mail.yahoo.com>
Received: from [209.8.72.253] by web20108.mail.yahoo.com via HTTP; Tue, 18 Sep 2001 21:38:19 PDT
Date: Tue, 18 Sep 2001 21:38:19 -0700 (PDT)
From: klein brock <getzz1@yahoo.com>
Subject: virus ?
To: freebsd-stable@FreeBSD.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-stable.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-stable>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-stable>
X-Loop: FreeBSD.ORG

i'm currently using freebsd4.4-prerelease .... but my
server is infected by a virus:

208.187.190.248 - - [18/Sep/2001:20:40:04 -0700] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 301  
208.187.190.248 - - [18/Sep/2001:20:40:04 -0700] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 301

if i upgrade it to 4.4-stable, will the virus remove
from my server ? or i have to re-install by cd and
cvsup ?

can i know what the possibility that my server
infected by this virus ?

Thanks in advance.

__________________________________________________
Terrorist Attacks on U.S. - How can you help?
Donate cash, emergency relief information
http://dailynews.yahoo.com/fc/US/Emergency_Information/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message