[THIN] Re: Virus Alert: New variant of MSBlaster coming your way...!!

  • From: Warren Rees <wrees@xxxxxxxxx>
  • To: thin@xxxxxxxxxxxxx
  • Date: Tue, 19 Aug 2003 12:40:59 -0400

The M$ patch would cause the reboot approximately 15-30 seconds after it
finished installing unless the worm uses the -z option while installing
the patch (which I hightly doubt, it probably only uses -q (quiet w/ no
user interaction).

Warren

On Tue, 19 Aug 2003 DMelczer@xxxxxxxx wrote:

> I don't think Variant D is installing the packages and making them
> immediately active without a reboot.  However, the changes it makes will
> probably become active on the next user reboot.
>
> -----Original Message-----
> From: Greg Reese [mailto:GReese@xxxxxxxxxxxxxxxx]
> Sent: Tuesday, August 19, 2003 9:01 AM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: Virus Alert: New variant of MSBlaster coming your
> way...!!
>
>
> it is also interesting that a virus writer can find a way to silently
> install patches without requiring a reboot but Microsoft can't.  If
> Microsoft's updates installed so effortlessly, there would be a lot fewer
> problems.
>
> -----Original Message-----
> From: Jan Broucinek [mailto:tinybeetle@xxxxxxxx]
> Sent: Tuesday, August 19, 2003 8:56 AM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: Virus Alert: New variant of MSBlaster coming your
> way...!!
>
>
> I'd never willingly allow this or a similar ilk into my network. But I
> find the concept amusing. Imagine if every time someone released a
> virus, someone else wrote a worm that hunts it down, kills the virus,
> patches the machine, and then uninstalls itself.
>
> ----- Original Message -----
> From: "Nail, Larry" <lnail@xxxxxx>
> To: <thin@xxxxxxxxxxxxx>
> Sent: Tuesday, August 19, 2003 8:44 AM
> Subject: [THIN] Re: Virus Alert: New variant of MSBlaster coming your
> way...!!
>
>
> > No, not the first helpful one, but honestly, do you really want
> someone
> > you don't know, doing this to your systems?
> >
> > -----Original Message-----
> > From: Jan Broucinek [mailto:tinybeetle@xxxxxxxx]
> > Sent: Tuesday, August 19, 2003 7:44 AM
> > To: thin@xxxxxxxxxxxxx
> > Subject: [THIN] Re: Virus Alert: New variant of MSBlaster coming
> your
> > way...!!
> >
> > That is just too funny. Somebody rewrote the mblaster virus to patch
> for
> > the hole and then remove itself when the year is 2004. This might be
> the
> > first instance of a "helpful" worm.
> >
> > Jan Broucinek, System Manager
> > Arthur Rutenberg Homes, Inc.
> > (727) 536-5900 voice
> > (727) 536-7168 x245 direct
> > (727) 538-9089 fax
> > www.arhomes.com
> >
> >
> > ----- Original Message -----
> > From: "Jim Kenzig http://thethin.net"; <jimkenz@xxxxxxxxxxxxxx>
> > To: <thin@xxxxxxxxxxxxx>; <windows2000@xxxxxxxxxxxxx>
> > Sent: Monday, August 18, 2003 10:03 PM
> > Subject: [THIN] Virus Alert: New variant of MSBlaster coming your
> > way...!!
> >
> >
> > >
> >
> http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MSB
> > LAST
> > > .D
> > >
> > > ********************************************************
> > > This Week's Sponsor:  RES PowerFuse, The Management Framework for
> > Windows
> > > Eliminate Multiple Tools, Multiple Support Channels and Multiple
> > Costs
> > > Manage, Control, and Secure an Entire Windows environment with
> Ease,
> > including Real-time Reporting and Documenting Components
> > > Validate a Meaningful ROI on All of your IT Investments with RES
> > PowerFuse.
> > > http://www.respowerfuse.com/
> > > **********************************************************
> > > Useful Thin Client Computing Links are available at:
> > > http://thethin.net/links.cfm
> > >
> > > For Archives, to Unsubscribe, Subscribe or
> > > set Digest or Vacation mode use the below link:
> > > http://thethin.net/citrixlist.cfm
> > >
> >
> >
> > ********************************************************
> > This Week's Sponsor:  RES PowerFuse, The Management Framework for
> > Windows
> > Eliminate Multiple Tools, Multiple Support Channels and Multiple
> Costs
> > Manage, Control, and Secure an Entire Windows environment with Ease,
> > including Real-time Reporting and Documenting Components
> > Validate a Meaningful ROI on All of your IT Investments with RES
> > PowerFuse.
> > http://www.respowerfuse.com/
> > **********************************************************
> > Useful Thin Client Computing Links are available at:
> > http://thethin.net/links.cfm
> >
> > For Archives, to Unsubscribe, Subscribe or
> > set Digest or Vacation mode use the below link:
> > http://thethin.net/citrixlist.cfm
> > ********************************************************
> > This Week's Sponsor:  RES PowerFuse, The Management Framework for
> Windows
> > Eliminate Multiple Tools, Multiple Support Channels and Multiple
> Costs
> > Manage, Control, and Secure an Entire Windows environment with Ease,
> including Real-time Reporting and Documenting Components
> > Validate a Meaningful ROI on All of your IT Investments with RES
> PowerFuse.
> > http://www.respowerfuse.com/
> > **********************************************************
> > Useful Thin Client Computing Links are available at:
> > http://thethin.net/links.cfm
> >
> > For Archives, to Unsubscribe, Subscribe or
> > set Digest or Vacation mode use the below link:
> > http://thethin.net/citrixlist.cfm
> >
>
>
> ********************************************************
> This Week's Sponsor:  RES PowerFuse, The Management Framework for Windows
> Eliminate Multiple Tools, Multiple Support Channels and Multiple Costs
> Manage, Control, and Secure an Entire Windows environment with Ease,
> including Real-time Reporting and Documenting Components
> Validate a Meaningful ROI on All of your IT Investments with RES PowerFuse.
> http://www.respowerfuse.com/
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thethin.net/links.cfm
>
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
> ********************************************************
> This Week's Sponsor:  RES PowerFuse, The Management Framework for Windows
> Eliminate Multiple Tools, Multiple Support Channels and Multiple Costs
> Manage, Control, and Secure an Entire Windows environment with Ease,
> including Real-time Reporting and Documenting Components
> Validate a Meaningful ROI on All of your IT Investments with RES PowerFuse.
> http://www.respowerfuse.com/
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thethin.net/links.cfm
>
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
>
>
> **********************************************************************
> Please be advised that this transmittal may be a confidential attorney-client 
> communication or may otherwise be privileged or confidential.  If you are not 
> the intended recipient, please do not read, copy or re-transmit this 
> communication.  If you have received this communication in error, please 
> notify us by e-mail (postmaster@xxxxxxxx) or by telephone (call us collect at 
> 212-403-4357) and delete this message and any attachments. Thank you in 
> advance for your cooperation and assistance.
>
> www.wlrk.com
> **********************************************************************
>
> ********************************************************
> This Week's Sponsor:  RES PowerFuse, The Management Framework for Windows
> Eliminate Multiple Tools, Multiple Support Channels and Multiple Costs
> Manage, Control, and Secure an Entire Windows environment with Ease, 
> including Real-time Reporting and Documenting Components
> Validate a Meaningful ROI on All of your IT Investments with RES PowerFuse.
> http://www.respowerfuse.com/
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thethin.net/links.cfm
>
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
>

********************************************************
This Week's Sponsor:  RES PowerFuse, The Management Framework for Windows
Eliminate Multiple Tools, Multiple Support Channels and Multiple Costs
Manage, Control, and Secure an Entire Windows environment with Ease, including 
Real-time Reporting and Documenting Components
Validate a Meaningful ROI on All of your IT Investments with RES PowerFuse.
http://www.respowerfuse.com/
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

Other related posts: