RE: Virus Outbreak Attacking MS05-039
Meni Milstein <[email protected]>
| Newsgroups | gmane.comp.security.virus |
|---|---|
| Message-ID | <[email protected]> |
As far as I know, if you are firewalled correctly and have your 445 tcp port shut to the outside - this thing should NOT be able to get in. Am I wrong? Meni Milstein. http://www.lcs-guides.com -----Original Message----- From: Mike [mailto:[email protected]] Sent: Monday, August 15, 2005 3:41 PM To: [email protected] Subject: Virus Outbreak Attacking MS05-039 Hi List, Yesterday one of my customers was hit hard by what appears to be a variant of zotob. http://securityresponse.symantec.com/avcenter/venc/data/w32.zotob.b.html This one was very (noisy) crashing services.exe and forcing re-boots on unpatched WIN2K machines. The boxes we've had a chance to look at were not infected, but were unpatched. We hope to have samples today from the same network and have a closer look. It's time to get patching! Regards Mike Mike Information Security and Logistics www.infosec.co.nz