RE: MSBLASTER Infecting despite 03-026 patch?

From: Mike Dresser (mdresserat_private)
Date: Mon Aug 11 2003 - 22:49:00 PDT

  • Next message: sean.richmondat_private: "Re: MSBLASTER Infecting despite 03-026 patch?" 

    Doesn't the worm install a patch of its own that looks like the MS patch,
and in fact uses components from it?

thought I saw that on the SANS list.

http://isc.sans.org/diary.html?date=2003-08-09


---------------------------------------------------------------------------
----------------------------------------------------------------------------

    This archive was generated by hypermail 2b30 : Tue Aug 12 2003 - 16:38:04 PDT