Re: ISA blocking script for W32_MyDoom
- From: "cismic" <cismic@xxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Sat, 31 Jan 2004 12:19:03 -0800
Hi Jim,
If I'm the Joe or "Joseph" you're talking about then yup, I got real sick
this week and cancelled all my plans.
Just getting around to a few things. I really wish I could have made it.
Well there is always July in Vegas.
Joseph
----- Original Message -----
From: "Jim Harrison" <jim@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, January 30, 2004 9:08 PM
Subject: [isalist] ISA blocking script for W32_MyDoom
> http://www.ISAserver.org
>
> Hi all,
>
> Black Hat was a blast, but I still missed having Tom nearby for support
and brains...
>
> As promised, you can find the MyDoom blocking script on
www.isatools.org/block_mydoom.vbs.
>
> I don't have a "cleaner" script this time because this one attaches itself
to the explorer process and if the script kills that
> process, it effectively commit suicide.
> Symantec, Computer Associates, etc all have perfectly functional removal
tools and steps.
>
> Jim Harrison
> MCP(NT4, W2K), A+, Network+, PCG
> http://www.microsoft.com/isaserver
> http://isaserver.org/Jim_Harrison
> http://isatools.org
>
> Read the help, books and articles!
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
cismic@xxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
Other related posts:
