From what I read about it they talk about their Machines having been hacked, it doesn't seem to have anything to do with the recent blaster worm, a lot of people are just finding out that they have been hacked before this new worm using the same exploit Bruce Martins Systems Administrator EXTEND>>MEDIA 190 Liberty Street Toronto, Ontario Canada M6K 3L5 _______________________ e:bmartinsat_private t: (416) 535-4222 ext. 2307 f: (416) 535-1201 http://www.extend.com -----Original Message----- From: Mike Dresser [mailto:mdresserat_private] Sent: Tuesday, August 12, 2003 1:49 AM To: incidentsat_private Doesn't the worm install a patch of its own that looks like the MS patch, and in fact uses components from it? thought I saw that on the SANS list. http://isc.sans.org/diary.html?date=2003-08-09 ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ ---- --------------------------------------------------------------------------- ----------------------------------------------------------------------------
This archive was generated by hypermail 2b30 : Wed Aug 13 2003 - 08:14:12 PDT