Nimda takes out local ISP

By Megan McAuliffe, ZDNet Australia
20 September 2001 03:45 PM
Tags: worm, virus, isp, nimda, robertson, server, yesterday, hit
A Sydney-based Internet Service Provider (ISP) has revealed its painstaking task in getting its service up and running again after being viciously attacked by the Nimda worm yesterday.

HTMLnet, a niche ISP based in Sydney, told ZDNet Australia that its ten servers were literally being infected while the ISP was reading about the new virulent worm on the United States virus tracking Web sites.

-It was still too new for the local anti-virus companies to analyse the virus when it was hitting us," HTMLnet partner Matthew Robertson said.

Robertson said at least with past viruses they have had time to defend themselves.

The Nimda worm hit the ISP yesterday morning at 10.50, claiming ten servers and 12 client Web sites.

-It hit a client server which runs active content back to our servers, which infected us," Robertson said.

A report by ZDNet Australia yesterday revealed that the Nimda virus utilises Microsoft's Internet Information Server (IIS) directory and from there launches an attack on other Web servers.

-We've managed to clean eight of the ten servers, however, two of them we couldn't clean so we've had to rebuild them completely," Robertson said.

The ISP's main mail server and Web server are still down.

Advertisement

Talkback 3 comments

    "Robertson said at least ...Anonymous -- 21/09/01

    "Robertson said at least with past viruses they have had time to defend themselves."

    How can he make this claim. The defence against Nimba consisists entirely of patches that have been around for at least 2 months now.

    This worm exploits the same bu ...Anonymous -- 21/09/01

    This worm exploits the same buffer overflow vulnerability exhibited by code red. These guys deserve everything they got, because they obviously had not patched the system for a problem which has existed for months. These companies need to start taking responsibility for their actions (or lack thereof). I wouldn't use this ISP. They obviously have no idea what they're doing.

    Serves them right. As stated ...Keith Styles -- 21/09/01

    Serves them right. As stated by the previous writers, the patches have been available for this virus now for over 2 months.
    Any ISP who fails to keep their servers uptodate with the latest patches, shouldn't be in business. Their IT staff should be fired. They don't know what they are doing!

Add your opinion

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Suzanne Tindal IT: Govt's cost-cutting bitch
    The government needs to stop looking at IT as a necessary evil or the place to remove costs when the Treasurer comes calling.
  • Array Can complaints on mobile content be cut?
    On 1 July this year the new Mobile Premium Services Code was introduced. It sounds like it's had a good impact, but is it enough?
  • Array NZ farmers: Bleating about broadband
    As we know, farmers are such bleaters. They bleat as much as the four-legged woolly things in their paddocks. If it's not the weather, it's the strength of the dollar! Nothing is ever right. Likewise with rural broadband.
  • More blogs »

Tags

Back to top

Featured