Have they found the origin of the Sasser Virus yet ? Regards Sebas -----Oorspronkelijk bericht----- Van: Rob Moore [mailto:RMoore@xxxxxxxx] Verzonden: dinsdag 4 mei 2004 16:07 Aan: [ISAserver.org Discussion List] Onderwerp: [isalist] Re: Sasser worm blocking scripts for ISA http://www.ISAserver.org Yes, I got the same error just now, having downloaded the latest tool. (I ran the first version earlier this morning.) Rob -----Original Message----- From: Jenifer M. Nech [mailto:Jenifer.Nech@xxxxxxxxxxxx] Sent: Tuesday, May 04, 2004 9:52 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Sasser worm blocking scripts for ISA http://www.ISAserver.org Script gives me the following error: --------------------------- block_sasser.vbs --------------------------- Failed to remove the "W32.Sasser" protocol rule; error 0x80070002; The system cannot find the file specified. Hit <CTRL> C to copy this error message to the clipboard. --------------------------- OK --------------------------- ISA 2000 on Windows 2003 ----- Jenifer Nech -----Original Message----- From: David Rutter [mailto:admin@xxxxxxxxxxxxxxxxxxxxx] Sent: Tuesday, May 04, 2004 8:20 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Sasser worm blocking scripts for ISA Importance: High http://www.ISAserver.org Thanks Jim. Regards, David -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Tuesday, May 04, 2004 2:23 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Sasser worm blocking scripts for ISA http://www.ISAserver.org Yep; I sent you guys a buggy script. ..sorry... I've found and fixed the bugs and the correct version is 1.3. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! On Tue, 4 May 2004 13:09:25 +0100 "David Rutter" <admin@xxxxxxxxxxxxxxxxxxxxx> wrote: http://www.ISAserver.org Running the script terminates with "Failed to remove the enterprise "W32.sasser" rule; Error 0x80070002; The system can not find the file specified" and does not install the protocols or rules. ISA 2k installed in Enterprise/integrated Solution? -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Tuesday, May 04, 2004 5:28 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Sasser worm blocking scripts for ISA http://www.ISAserver.org Latest update: - single script for ISA 2000 and ISA 2004 - accomodates A/B/C/D variants - versioning is contained in the script itself (for those who asked) http://isatools.org/block_sasser.vbs (complete with domain and tld! :-)) The old block_sasser_2k4.vbs is now gone, kapoof, splitsville... Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: admin@xxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: admin@xxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jenifer.nech@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: rmoore@xxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: s.vandijk@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')