Re: reports of DCOM worm on the loose...#3

From: Erich Vinson (evinson_at_TRGINC.US)
Date: 08/11/03

  • Next message: Russ: "Re: reports of DCOM worm on the loose...#3" 
    Date:         Mon, 11 Aug 2003 15:14:44 -0600
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    What I have seen is the following:

    Name of registry key:
    SOFTWARE\Microsoft\Windows\CurrentVersion\Run

    name: 'windows auto update'
    value:'msblast.exe'

    Looks like a typo in the information you got.

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
    Are You "Certifiable"? Summer's Hottest Certification Just Got HOTTER!

    With a growth rate exceeding 110%, the TICSA security practitioner
    certification is one of the hottest IT credentials available. And now, for
    a limited time, you can save 33% off of the TICSA certification exam! To
    learn more about the TICSA certification, and to register as a TICSA
    candidate online, just go to

    http://www.trusecure.com/offer/s0100/

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo

  • Next message: Russ: "Re: reports of DCOM worm on the loose...#3"

    Relevant Pages

    • Re: Alert: Microsoft Security Bulletin - MS03-039
      ... The way that Microsoft patched the new RPC Part II vulnerability ... Summer's Hottest Certification Just Got HOTTER! ... To learn more about the TICSA certification, ...
      (NT-Bugtraq)
    • Re: reports of DCOM worm on the loose...#3
      ... The registry key which is modified in order to make the worm propagate is; ... Summer's Hottest Certification Just Got HOTTER! ... you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)
    • WHERE ARE NT4 OLD PASSWORDS STORED
      ... Sorry if this bores many of you (being an NT4 question), ... Summer's Hottest Certification Just Got HOTTER! ... you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)
    • Re: Alert: Microsoft Security Bulletin - MS03-039
      ... Checking for both will fail since the files will be updated but the registry key is still there. ... Summer's Hottest Certification Just Got HOTTER! ... you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)
    • Firewalls and DCOM
      ... Never underestimate the lengths to which your users will inadvertently go through to infect a network;)" ... Summer's Hottest Certification Just Got HOTTER! ... you can save 33% off of the TICSA certification exam! ...
      (NT-Bugtraq)