I personally think that rebuilding a server is easier... Drop a ghost image or whatever, then restore last night's backup... When was the last time that users backup on a nightly basis!?!?! -----Original Message----- From: Jennifer Hooper [mailto:jennifer.hooper@xxxxxxxxxxxxx] Sent: Tuesday, March 23, 2004 2:20 PM To: 'melvin.columna@xxxxxxxxx' Subject: RE: [THIN] Re: FYI - New worm OUCH!!!!! And I thought having to rebuild the our data center was bad. :( I feel your pain man. At least it was workstations. :| Jen -----Original Message----- From: Columna, Melvin [mailto:Melvin.Columna@xxxxxxxxx] Sent: Tuesday, March 23, 2004 10:46 AM To: 'thin@xxxxxxxxxxxxx' Subject: [THIN] Re: FYI - New worm Wow... I dont know who made the call here, but now every workstation was loaded with BlackIce about a month ago (1000's). And yes, a bunch of people got hit... my boss was one of them. -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Matt Kosht Sent: Tuesday, March 23, 2004 11:21 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: FYI - New worm Wow one week. I am a registered user of BlackICE and didn't get so much as a peep from ISS. ISS's reputation is in toliet after this one. I can remember Steve Gibson http://www.grc.com complaining about BlackICE inadequacies as a firewall over 2 years ago. Looks like he was right. Thankfully I had only had a lone 2 PC branch office that was still running this piece of garbage. Luckily they did not have the worm yet. >>> amerk@xxxxxxxxxxxxxxxx 3/22/2004 9:58:05 PM >>> Sorry to hear you got hit that hard, but according to ISS they had a patch out for this a week before the worm hit. From their website: (http://www.iss.net/)=20 "The fix was delivered as a maintenance update before eEye publicly disclosed the vulnerability. Before any worm could be developed 'in the wild', ISS customers were protected automatically via a simple update that shielded the vulnerability from attack." I'm guessing you guys didn't get the update? Regards, Amer Karim Nautilis Information Systems e-mail: amerk@xxxxxxxxxxxxxxxx =20 =20 -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Jennifer Hooper Sent: March 22, 2004 4:16 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: FYI - New worm I just want to say that this virus writer must really have some brass ones, man. This was a looloo, came back in through ISS on our servers. Knocked out all critical systems. Thank goodness we have great people on our team, enabling us to be back up by business this morning...mostly. I sure hope that no one else got hit with it. We might be doing cleanup for weeks. Jen -----Original Message----- From: Amer Karim [mailto:amerk@xxxxxxxxxxxxxxxx]=20 Sent: Saturday, March 20, 2004 4:20 PM To: thin@xxxxxxxxxxxxx; windows2000@xxxxxxxxxxxxx Subject: [THIN] Re: FYI - New worm Sorry - the URL got a little messed up when I sent it. It should be http://tinyurl.com/2n3b7. (w/o the '=3D3D20' at the end) Regards, Amer Karim Nautilis Information Systems e-mail: amerk@xxxxxxxxxxxxxxxx =3D20 =3D20 -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Amer Karim Sent: March 20, 2004 4:16 PM To: thin@xxxxxxxxxxxxx; windows2000@xxxxxxxxxxxxx Subject: [THIN] FYI - New worm Just a heads up for everyone, particularly those running Black Ice. http://tinyurl.com/2n3b7=3D3D20 Regards, Amer Karim Nautilis Information Systems e-mail: amerk@xxxxxxxxxxxxxxxx =3D3D20 =3D3D20 ******************************************************** This weeks sponsor Emergent Online. Emergent OnLine is the leading server-based computing consulting integration firm in the nation. Emergent OnLine delivers expert=3D20 consulting services you can depend on. http://www.go-eol.com ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or=3D20 set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm ******************************************************** This weeks sponsor Emergent Online. Emergent OnLine is the leading server-based computing consulting integration firm in the nation. Emergent OnLine delivers expert consulting services you can depend on. http://www.go-eol.com ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm ******************************************************** This weeks sponsor Emergent Online. Emergent OnLine is the leading server-based computing consulting integration firm in the nation. Emergent OnLine delivers expert=20 consulting services you can depend on. http://www.go-eol.com ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or=20 set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm ******************************************************** This weeks sponsor Emergent Online. Emergent OnLine is the leading server-based computing consulting integration firm in the nation. Emergent OnLine delivers expert consulting services you can depend on. http://www.go-eol.com ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm ******************************************************** This weeks sponsor Emergent Online. Emergent OnLine is the leading server-based computing consulting integration firm in the nation. Emergent OnLine delivers expert consulting services you can depend on. http://www.go-eol.com ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm ******************************************************** This weeks sponsor Emergent Online. Emergent OnLine is the leading server-based computing consulting integration firm in the nation. Emergent OnLine delivers expert consulting services you can depend on. http://www.go-eol.com ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm ******************************************************** This weeks sponsor Emergent Online. Emergent OnLine is the leading server-based computing consulting integration firm in the nation. Emergent OnLine delivers expert consulting services you can depend on. http://www.go-eol.com ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm