Blaster Worm Rebooting Patched Machines!

From: Eric Hines (eric.hinesat_private)
Date: Wed Aug 13 2003 - 07:10:58 PDT

  • Next message: the_baronat_private: "MsBlast"

    All:
    
    We are seeing patched machines being rebooted by other worm infected hosts. 
    Nick Fitzgerald on the intrusions@ list explained that it's other hosts 
    attempting to infect the patched system and gets the offset wrong based on the 
    80/20 weighting. Is anyone else seeing this happen?
    
    Eric Hines
    -------------------------------------------
    Eric Hines
    CEO, Chairman
    Applied Watch Technologies, Inc.
    web: http://www.appliedwatch.com
    email: eric.hinesat_private
    -------------------------------------------
    Direct: (877) 262-7593 - Toll Free x327
    Fax: (815) 425-2173
    General: (877) 262-7593 (9am-5pm CST)
    -------------------------------------------
    
    
    
    
    
    
    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Wed Aug 13 2003 - 08:19:16 PDT