We are looking at this right now.  Thank you for your prompt notification.




-----Original Message-----
From: firebird@digitaldaemon.com [mailto:firebird@digitaldaemon.com]
Sent: Tuesday, October 30, 2001 12:41 PM
To: abuse@host223-244-72-63.worldcaretech.com;
postmaster@host223-244-72-63.worldcaretech.com; abuse@worldcaretech.com;
postmaster@worldcaretech.com
Subject: Virus Intrusion Attempt Via Your Network!


A virus intrusion attempt via your network IP 63.72.244.223
has been made to IP 63.105.9.59 domain virtualsmurfer.com.

A Nimda intrusion attempt was made against virtualsmurfer.com:
   Remote IP Address : 63.72.244.223, Port : 4648
   Server IP Address : 63.105.9.59, Port : 80
   Request URI : /scripts/root.exe?/c+dir
   Time : Tue Oct 30 12:40:35 2001 (EST)

Please advice your user or customer that their system has been
compromised and is actively being used as launch point for attacking
other systems!

Thanks for taking the appropriate action in this matter.

Sincerely,
FireBird

http://www.digitaldaemon.com/FreeBSD/firebird/