Re: cuebot-d infection method

Jeff Bryner <[email protected]>
Newsgroups gmane.comp.security.incidents
Message-ID <[email protected]>
>    "W32/Cuebot-D attempts to spread using a variety of techniques
>     including the exploitation of the PnP vulnerability (MS05-039)."
>     ... from my reading of it, there multiple attack vectors involved

Yes, thanks for reading me the link I provided ;-) I *did* read all
tabs on the links and did google for other references. I guess I should
have stated that...oh well no worries.

I was looking for more detail from those who had actually delt with
this specific beast about what the other 'variety of techniques' were
besides the ms05-039 vulnerability. Thanks to those who responded with
their stories.

FYI in case you run into this here is my story.  It seems the machines
in my case had been attached to an unprotected network and were
unpatched against ms05-039. When they attached to the production
network, whammo. Old scenario, new worm.

Thanks again, case closed. 

Jeff.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.