[THIN] Re: FYI - New worm

  • From: "Columna, Melvin" <Melvin.Columna@xxxxxxxxx>
  • To: 'Jennifer Hooper' <jennifer.hooper@xxxxxxxxxxxxx>,thin@xxxxxxxxxxxxx
  • Date: Tue, 23 Mar 2004 15:21:17 -0500

I personally think that rebuilding a server is easier... 

Drop a ghost image or whatever, then restore last night's backup...

When was the last time that users backup on a nightly basis!?!?!

-----Original Message-----
From: Jennifer Hooper [mailto:jennifer.hooper@xxxxxxxxxxxxx]
Sent: Tuesday, March 23, 2004 2:20 PM
To: 'melvin.columna@xxxxxxxxx'
Subject: RE: [THIN] Re: FYI - New worm


OUCH!!!!!  And I thought having to rebuild the our data center was bad. :(
I feel your pain man.  At least it was workstations. :|

Jen

-----Original Message-----
From: Columna, Melvin [mailto:Melvin.Columna@xxxxxxxxx] 
Sent: Tuesday, March 23, 2004 10:46 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: FYI - New worm

Wow... I dont know who made the call here, but now every workstation was
loaded with BlackIce about a month ago (1000's).  And yes, a bunch of people
got hit... my boss was one of them.


-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On
Behalf Of Matt Kosht
Sent: Tuesday, March 23, 2004 11:21 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: FYI - New worm


Wow one week.  I am a registered user of BlackICE and didn't get so much as
a peep from ISS.

ISS's reputation is in toliet after this one.  I can remember Steve Gibson
http://www.grc.com complaining about BlackICE inadequacies as a firewall
over 2 years ago.  Looks like he was right.  Thankfully I had only had a
lone 2 PC branch office that was still running this piece of garbage.
Luckily they did not have the worm yet.


>>> amerk@xxxxxxxxxxxxxxxx 3/22/2004 9:58:05 PM >>>
Sorry to hear you got hit that hard, but according to ISS they had a patch
out for this a week before the worm hit.

From their website: (http://www.iss.net/)=20 "The fix was delivered as a
maintenance update before eEye publicly disclosed the vulnerability. Before
any worm could be developed 'in the wild', ISS customers were protected
automatically via a simple update that shielded the vulnerability from
attack."

I'm guessing you guys didn't get the update?

Regards,
Amer Karim
Nautilis Information Systems
e-mail: amerk@xxxxxxxxxxxxxxxx
=20
=20

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Jennifer Hooper
Sent: March 22, 2004 4:16 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: FYI - New worm

I just want to say that this virus writer must really have some brass ones,
man.   This was a looloo, came back in through ISS on our servers.
Knocked
out all critical systems. Thank goodness we have great people on our team,
enabling us to be back up by business this morning...mostly.  I sure hope
that no one else got hit with it.  We might be doing cleanup for weeks.

Jen

-----Original Message-----
From: Amer Karim [mailto:amerk@xxxxxxxxxxxxxxxx]=20
Sent: Saturday, March 20, 2004 4:20 PM
To: thin@xxxxxxxxxxxxx; windows2000@xxxxxxxxxxxxx
Subject: [THIN] Re: FYI - New worm

Sorry - the URL got a little messed up when I sent it.

It should be http://tinyurl.com/2n3b7.
(w/o the '=3D3D20' at the end)

Regards,
Amer Karim
Nautilis Information Systems
e-mail: amerk@xxxxxxxxxxxxxxxx
=3D20
=3D20

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Amer Karim
Sent: March 20, 2004 4:16 PM
To: thin@xxxxxxxxxxxxx; windows2000@xxxxxxxxxxxxx
Subject: [THIN] FYI - New worm

Just a heads up for everyone, particularly those running Black Ice.

 http://tinyurl.com/2n3b7=3D3D20 

Regards,
Amer Karim
Nautilis Information Systems
e-mail: amerk@xxxxxxxxxxxxxxxx
=3D3D20
=3D3D20
********************************************************
This weeks sponsor Emergent Online.
Emergent OnLine is the leading server-based computing consulting integration
firm in the nation. Emergent OnLine delivers expert=3D20 consulting services
you can depend on.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or=3D20 set Digest or Vacation mode
use the below link:
http://thin.net/citrixlist.cfm 


********************************************************
This weeks sponsor Emergent Online.
Emergent OnLine is the leading server-based computing consulting integration
firm in the nation. Emergent OnLine delivers expert consulting services you
can depend on.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use
the below link:
http://thin.net/citrixlist.cfm
********************************************************
This weeks sponsor Emergent Online.
Emergent OnLine is the leading server-based computing consulting integration
firm in the nation. Emergent OnLine delivers expert=20 consulting services
you can depend on.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or=20 set Digest or Vacation mode
use the below link:
http://thin.net/citrixlist.cfm 



********************************************************
This weeks sponsor Emergent Online.
Emergent OnLine is the leading server-based computing consulting integration
firm in the nation. Emergent OnLine delivers expert consulting services you
can depend on.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use
the below link:
http://thin.net/citrixlist.cfm
********************************************************
This weeks sponsor Emergent Online.
Emergent OnLine is the leading server-based computing consulting integration
firm in the nation. Emergent OnLine delivers expert consulting services you
can depend on.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use
the below link:
http://thin.net/citrixlist.cfm
********************************************************
This weeks sponsor Emergent Online.
Emergent OnLine is the leading server-based computing consulting integration
firm in the nation. Emergent OnLine delivers expert consulting services you
can depend on.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use
the below link:
http://thin.net/citrixlist.cfm
********************************************************
This weeks sponsor Emergent Online.
Emergent OnLine is the leading server-based computing consulting integration 
firm in the nation. Emergent OnLine delivers expert 
consulting services you can depend on.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: