Re: Virus Outbreak Attacking MS05-039

If you're having issues with OOC laptops, then I highly recommend
VMware's ACE. I've successfully implemented this in a number of
organizations. More info here:
 - http://www.vmware.com/products/desktop/ace_features.html
--
Peace. ~G

On 8/15/05, Mike <[email protected]> wrote:
> Yep correct, but easily brought in by one "out of compliance" infected
> laptop.
> 
> Mike
> -----Original Message-----
> From: Meni Milstein [mailto:[email protected]]
> Sent: Tuesday, August 16, 2005 6:00 AM
> To: 'Mike'
> Cc: [email protected]
> Subject: RE: Virus Outbreak Attacking MS05-039
> 
> As far as I know, if you are firewalled correctly and have your 445 tcp port
> shut to the outside - this thing should NOT be able to get in.
> Am I wrong?
> 
> Meni Milstein.
> http://www.lcs-guides.com
> 
> 
> 
> -----Original Message-----
> From: Mike [mailto:[email protected]]
> Sent: Monday, August 15, 2005 3:41 PM
> To: [email protected]
> Subject: Virus Outbreak Attacking MS05-039
> 
> Hi List,
> Yesterday one of my customers was hit hard by what appears to be a variant
> of zotob.
> http://securityresponse.symantec.com/avcenter/venc/data/w32.zotob.b.html
> 
> This one was very (noisy) crashing services.exe and forcing re-boots on
> unpatched WIN2K machines. The boxes we've had a chance to look at were not
> infected, but were unpatched. We hope to have samples today from the same
> network and have a closer look.
> 
> It's time to get patching!
> 
> Regards
> Mike
> 
> Mike
> 
> Information Security and Logistics
> www.infosec.co.nz
> 
> 
> 
> 
>