[THIN] Re: ********Virus Problems************

  • From: "Stratton, Doug MSER:EX" <Doug.M.Stratton@xxxxxxxxx>
  • To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
  • Date: Thu, 18 Aug 2005 17:50:50 -0700

Not in the farm 

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Danny
Sent: August 18, 2005 3:33 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: ********Virus Problems************

On 8/18/05, Stratton, Doug MSER:EX <Doug.M.Stratton@xxxxxxxxx> wrote:
>  
> 
> Some of our w2k mfpsv3 servers got the esbot infection. 
> 
> Part of the clean up is to set
> 5. Check if removal tool did this already - Modify the registry key 
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa and set 
> "restrictanonymous" = "0"
> 
> I don't know much about this but was wondering if any of you have done 
> this and not had any problems?
> 
> It is currently 1 on all our servers including the ones infected. 

Depends on your envrionment; do you have any NT 4.0 Servers?

http://online.securityfocus.com/infocus/1352


...D

--
CPDE - Certified Petroleum Distribution Engineer CCBC - Certified Canadian
Beer Consumer
********************************************************
This Weeks Sponsor: triCerat Inc.
You need Day Zero Protection!
Get Proactive with triCerat's Simplify Suite.
Solve printing, security and profile problems before they occur.
http://www.tricerat.com/?thethintl2
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use
the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor: triCerat Inc.
You need Day Zero Protection!
Get Proactive with triCerat's Simplify Suite.
Solve printing, security and profile problems before they occur.
http://www.tricerat.com/?thethintl2
********************************************************** 
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: