This hit my inbox this morning:

http://www.infoworld.com/articles/hn/xml/01/08/01/010801hnnomelt.xml?0801ale
rt

Summary:
It looks like it woke up, but it's too early to see the damage.
M$ says 200,000 copies of patch downloaded on Sunday-Monday, but some are by
Win9X users who thought they needed it.
NA scanned 20,000 IIS servers and 1230 were still unprotected. (so about 5%
which = about 300,000 machines, _if_ you can extrapolate the number)
Some guy at Matrix.net is blaming a teenager for it ??

Thanks,

James Spinti
jspinti at dartdist.com
952-368-3278 x396
fax 952-368-3255

|-----Original Message-----
|From: tclug-list-admin at mn-linux.org
|[mailto:tclug-list-admin at mn-linux.org]On Behalf Of Mike Hicks
|Sent: Wednesday, August 01, 2001 8:17 AM
|To: tclug-list at mn-linux.org
|Subject: Re: [TCLUG] Code Red, red faced?
|
|
|Bob Tanner <tanner at real-time.com> wrote:
|>
|> Well the west coast just hit midnight and I am staring at my
|>
|> 	tail -f /var/log/httpd/access.log
|>
|> With bleery eyes and I'm not seeing anything suspicious.
|>
|> I'm just embarrassed (red faced) at the no-show for code red. :-P
|
|Heh, well it takes time for these things to grow again.  How many NT boxes
|do you think got infected and didn't get rebooted between the 19th and
|today?
|
|I did get two hits from it this morning (5:30, 7:00)
|
|--
| _  _  _  _ _  ___    _ _  _  ___ _ _  __   90% of all statistics are
|/ \/ \(_)| ' // ._\  / - \(_)/ ./| ' /(__   made up on the spot.
|\_||_/|_||_|_\\___/  \_-_/|_|\__\|_|_\ __)
|[ Mike Hicks | http://umn.edu/~hick0088/ | mailto:hick0088 at tc.umn.edu ]
|