New MS03-026 worm on the loose? ICMP traffic climbing fast

From: Jeffrey Thomas (jthomas_at_ETAXFN.COM)
Date: 08/18/03

  • Next message: Russ: "Re: MS03-026 on clusters" 
    Date:         Mon, 18 Aug 2003 12:38:05 -0400
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    Apparently we've got a new DCOM based worm on the loose this morning. The AV folks are apparently still checking into it. Looks like it deletes blaster if found and even is nice enough to patch your system if it needs it...or course after it's already nailed you. What it does after that...good question so far.

    Via incidents.org/sans.org site:

    http://isc.sans.org/diary.html?date=2003-08-18

    Jeffrey Thomas

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
    Are You "Certifiable"? Summer's Hottest Certification Just Got HOTTER!

    With a growth rate exceeding 110%, the TICSA security practitioner
    certification is one of the hottest IT credentials available. And now, for
    a limited time, you can save 33% off of the TICSA certification exam! To
    learn more about the TICSA certification, and to register as a TICSA
    candidate online, just go to

    http://www.trusecure.com/offer/s0100/

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo

  • Next message: Russ: "Re: MS03-026 on clusters"

    Relevant Pages