RE: code red---- on system that is already (and has been) patched

From: Mike Alexander <mike.alexander(at)mail.moray.gov.uk>
Date: Tue Mar 04 2003 - 06:46:08 EST

Sandy,

200 is in the HTTP "Successful" status codes (2xx), and 2000 specifically means "OK". As the action is a "GET" this suggests to me that the fetching of the given file/URL has been successful, and would be consistent with the file being present on the machine. But as the file is simply the "default" file, I suspect that this is the sort of thing you would expect to see. I'd look at the other entries to see if they respond with '4xx' or '5xx' codes.

Whether this means that you are infected or not is debatable. On the basis of this entry alone I'd tend to suggest that you aren't.

Regards,

Mike

---

Mike Alexander      Email: mike.alexander@moray.gov.uk
ICT Project Leader    Tel: 01343 563445   Fax: 01343 563221
The Moray Council     Web: 
http://www.moray.gov.uk
___________________________________________________________

"He is your friend, your partner, your defender, your dog. You are his life, his love, his leader. He will be yours, faithful and true, to the last beat of his heart. You owe it to him to be worthy of such devotion." -Anon.

• The Moray Council: Internet E-mail Notice ********

The contents of this e-mail and any attachments ('this e-mail') are confidential and intended solely for the addressee. If this e-mail has been sent to you by mistake, please notify postmaster@moray.gov.uk as soon as possible; you should then delete this e-mail from your computer. Received on Tue Mar 4 10:45:12 2003