RE: Virus Outbreak Attacking MS05-039
Meni Milstein <[email protected]>
| Newsgroups | gmane.comp.security.virus |
|---|---|
| Message-ID | <[email protected]> |
Of course… I was referring to my servers for starters. All laptops in our offices are protected and firewalled as well. Thanks for the concern though! ☺ ________________________________________ From: [email protected] [mailto:[email protected]] Sent: Monday, August 15, 2005 7:52 PM To: Meni Milstein; 'Mike' Cc: [email protected] Subject: RE: Virus Outbreak Attacking MS05-039 what about remote users? how do they connect to the internal network and what resources can they access? Laptops, what if I'm a road warrior and coming back to the office, with my unpatched and potentially compromised system Just my 2 cents. --John -------------- Original message -------------- > As far as I know, if you are firewalled correctly and have your 445 tcp port > shut to the outside - this thing should NOT be able to get in. > Am I wrong? > > Meni Milstein. > http://www.lcs-guides.com > > > > -----Original Message----- > From: Mike [mailto:[email protected]] > Sent: Monday, August 15, 2005 3:41 PM > To: [email protected] > Subject: Virus Outbreak Attacking MS05-039 > > Hi List, > Yesterday one of my customers was hit hard by what appears to be a variant > of zotob. > http://securityresponse.symantec.com/avcenter/venc/data/w32.zotob.b.html > > This one was very (noisy) crashing services.exe and forcing re-boots on > unpatched WIN2K machines. The boxes we've had a chance to look at were not > infected, but were unpatched. We hope to have samples today from the same > network and have a closer look. > > It's time to get patching! > > Regards > Mike > > Mike > > Information Security and Logistics > www.infosec.co.nz > > > > >