ISA blocking script for W32_MyDoom
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 30 Jan 2004 21:08:37 -0800
Hi all,
Black Hat was a blast, but I still missed having Tom nearby for support and
brains...
As promised, you can find the MyDoom blocking script on
www.isatools.org/block_mydoom.vbs.
I don't have a "cleaner" script this time because this one attaches itself to
the explorer process and if the script kills that
process, it effectively commit suicide.
Symantec, Computer Associates, etc all have perfectly functional removal tools
and steps.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
Other related posts: