MSBlast and other known exploits..

From: Micheal Patterson (micheal_at_cancercare.net)
Date: 08/13/03

  • Next message: alaric_at_alaricsecurity.com: "Re: msblast.exe available" 
    To: <incidents@securityfocus.com>
Date: Wed, 13 Aug 2003 07:44:44 -0500

    I've got reports of msblast infection that I've checked and they indeed do
    have msblast. Also, these systems all have what appears to be a corrupted
    control panel applet. The normal control panel shows up in a left hand frame
    and the contents of add/remove programs is missing. Also, various popup
    windows simply will not open. I've read that there was a known root kit
    that utilized the same dcom exploit called khat2 (spelling) but I'm not
    having much luck in locating the symptoms of systems that have been rooted
    in this manner. Any information would be appreciated. I will be recommending
    that these systems be blown away and reinstalled from clean media, I'm just
    looking for some info to verify what's eaten away at these things.

    Thank you. 

    --
Micheal Patterson
Network Administration
Cancer Care Network
405-733-2230
---------------------------------------------------------------------------
----------------------------------------------------------------------------
  • Next message: alaric_at_alaricsecurity.com: "Re: msblast.exe available"

    Relevant Pages

    • RE: MSBlast and other known exploits..
      ... MSBlast and other known exploits.. ... I've got reports of msblast infection that I've checked and they indeed do ... The normal control panel shows up in a left hand frame ...
      (Incidents)
    • Re: XP msinfo32.exe reported vs installed physical memory
      ... XP System tab under control panel ... multiple RAM modules installed. ... Provided that System Properties reports the correct amount of RAM this ...
      (microsoft.public.windowsxp.general)
    • Re: add/remove programs
      ... Under the 'add/remove programs' of the control panel, ... listed have indications on how often programs are used. ... that I know I use frequently, yet the listing reports that I use the ...
      (microsoft.public.windowsxp.general)
    • Quantcast