[windows2000] Re: Conundrum: ICF and MSBlast

  • From: Daniel Ensor <densor@xxxxxxxxx>
  • To: "'windows2000@xxxxxxxxxxxxx'" <windows2000@xxxxxxxxxxxxx>
  • Date: Wed, 13 Aug 2003 14:39:42 +0100

I totally agree. A couple of our home users got wormed. What's the point.
Why didn't the worm install the patch instead of whinging. Now that would be
impressive!

Dan

-----Original Message-----
From: Greg Reese [mailto:GReese@xxxxxxxxxxxxxxxx]
Sent: 13 August 2003 14:14
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: Conundrum: ICF and MSBlast


what a nasty worm this one is.  Just once I would like to see a virus do
something useful like fix a flaw or something.

Greg

-----Original Message-----
From: Angus Macdonald [mailto:Angus.Macdonald@xxxxxxxxxxxxxxxxxxx]
Sent: Wednesday, August 13, 2003 9:13 AM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: Conundrum: ICF and MSBlast


My home machine was infected and both the other machines on the network
follwed soon afterwards, infected by mine.

-----Original Message-----
From: Greg Reese [mailto:GReese@xxxxxxxxxxxxxxxx]
Sent: 13 August 2003 14:07
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: Conundrum: ICF and MSBlast


you have got MCSE, MCP+I etc after you name and you trusted the built in
Microsoft firewall??

Could another locally infected computer have gotten you?

Greg

-----Original Message-----
From: Joe Mulhall [mailto:Joe.Mulhall@xxxxxxxxxxxxx]
Sent: Wednesday, August 13, 2003 6:35 AM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Conundrum: ICF and MSBlast


Hi there,

I was infected by MSBlast the other day and hit again while repairing
it yet I was running Internet Connection Firewall (default config
including logging and no services enabled)

As Microsoft points out in MS03-026, "If you are using the Internet
Connection Firewall in Windows XP or Windows Server 2003 to protect your
Internet connection, it will by default block inbound RPC traffic from
the Internet."

Okay I should have patched anyway but the firewall should have
protected me. I checked the settings while I was patching and was hit
again...

Logs show nothing at all.

How was I infected?

Regards,

Joe Mulhall
MCSE, MCP+I, CCSA

Network Engineer

********************************************************
This Week's Sponsor - RTO Software / TScale
What's keeping you from getting more from your terminal servers? Did you
know, in most cases, CPU Utilization IS NOT the single biggest constraint to
scaling up?! Get this free white paper to understand the real constraints &
how to overcome them. SAVE MONEY by scaling-up rather than buying more
servers.
http://www.rtosoft.com/Enter.asp?ID=148
**********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm
********************************************************
This Week's Sponsor - RTO Software / TScale
What's keeping you from getting more from your terminal servers? Did you
know, in most cases, CPU Utilization IS NOT the single biggest constraint to
scaling up?! Get this free white paper to understand the real constraints &
how to overcome them. SAVE MONEY by scaling-up rather than buying more
servers.
http://www.rtosoft.com/Enter.asp?ID=148
**********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm
********************************************************
This Week's Sponsor - RTO Software / TScale
What's keeping you from getting more from your terminal servers? Did you
know, in most cases, CPU Utilization IS NOT the single biggest constraint to
scaling up?! Get this free white paper to understand the real constraints &
how to overcome them. SAVE MONEY by scaling-up rather than buying more
servers.
http://www.rtosoft.com/Enter.asp?ID=148
**********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm
********************************************************
This Week's Sponsor - RTO Software / TScale
What's keeping you from getting more from your terminal servers? Did you
know, in most cases, CPU Utilization IS NOT the single biggest constraint to
scaling up?! Get this free white paper to understand the real constraints &
how to overcome them. SAVE MONEY by scaling-up rather than buying more
servers.
http://www.rtosoft.com/Enter.asp?ID=148
**********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

Visit the new FDL web - site designed to serve you better -
http://www.fdl.co.uk 


This message has been sent from Fuerst Day Lawson Ltd and confirms that the
email has been scanned and to the best of our knowledge is free from virus
infection. The unauthorised use, disclosure, forwarding or copying of this
message and any attachments is strictly prohibited. If you have received
this message in error, please email moderator@xxxxxxxxx This message and any
attachments, which are confidential and may be privileged, are for the use
of the addressee(s) only. The views and opinions expressed in this email
message are the author's own and may not reflect the views and opinions of
Fuerst Day Lawson Ltd. 
********************************************************
This Week's Sponsor - RTO Software / TScale
What's keeping you from getting more from your terminal servers? Did you know, 
in most cases, CPU Utilization IS NOT the single biggest constraint to scaling 
up?! Get this free white paper to understand the real constraints & how to 
overcome them. SAVE MONEY by scaling-up rather than buying more servers.
http://www.rtosoft.com/Enter.asp?ID=148
**********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

Other related posts: