Re: Sasser worm blocking scripts for ISA

  • From: "Jenifer M. Nech" <Jenifer.Nech@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 4 May 2004 08:51:59 -0500

Script gives me the following error:

---------------------------
block_sasser.vbs
---------------------------
Failed to remove the "W32.Sasser" protocol rule; error 0x80070002; The
system cannot find the file specified.   Hit <CTRL> C to copy this error
message to the clipboard.
---------------------------
OK   
---------------------------

ISA 2000 on Windows 2003 


----- Jenifer Nech

-----Original Message-----
From: David Rutter [mailto:admin@xxxxxxxxxxxxxxxxxxxxx] 
Sent: Tuesday, May 04, 2004 8:20 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Sasser worm blocking scripts for ISA
Importance: High

http://www.ISAserver.org

Thanks Jim.

Regards,

David

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Tuesday, May 04, 2004 2:23 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Sasser worm blocking scripts for ISA


http://www.ISAserver.org

Yep; I sent you guys a buggy script.
..sorry...

I've found and fixed the bugs and the correct version is 1.3.

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!


On Tue, 4 May 2004 13:09:25 +0100
 "David Rutter" <admin@xxxxxxxxxxxxxxxxxxxxx> wrote:
http://www.ISAserver.org

Running the script terminates with "Failed to remove the enterprise
"W32.sasser" rule;  Error 0x80070002; The system can not find the file
specified" and does not install the protocols or rules.

ISA 2k installed in Enterprise/integrated

Solution?

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] 
Sent: Tuesday, May 04, 2004 5:28 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Sasser worm blocking scripts for ISA


http://www.ISAserver.org

Latest update:

- single script for ISA 2000 and ISA 2004
- accomodates A/B/C/D variants
- versioning is contained in the script itself (for those who asked)

http://isatools.org/block_sasser.vbs (complete with domain and tld!
:-))

The old block_sasser_2k4.vbs is now gone, kapoof, splitsville...

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
admin@xxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
admin@xxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jenifer.nech@xxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')




Other related posts: