Re: Remote Procedure Control
From: Todd J Heron (todd_heron_no_spam_at_hotmail.com)
Date: 01/17/05
- Next message: Todd J Heron: "Re: How to remove IE icon from start menu...help"
- Previous message: Todd J Heron: "Re: User and File Management"
- In reply to: Anders Petterĝe: "Remote Procedure Control"
- Next in thread: Anders Petterĝe: "Re: Remote Procedure Control"
- Reply: Anders Petterĝe: "Re: Remote Procedure Control"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 17 Jan 2005 11:52:22 -0500
This behavior is descriptive the blaster virus or a variant of it which
attacks the RPC service. I'd update my AV definitions and perform another
manual scan on this machine.
Reference:
http://www.microsoft.com/security/incident/blast.mspx -- description of
blaster worm
http://www.trendmicro.com/download/dcs.asp -- copy Sysclean and pattern
file into same folder to execute from.
http://www.trendmicro.com/download/pattern.asp
http://www.microsoft.com/smallbusiness/gtm/securityguidance/hub.mspx --
Microsoft security guidance.
http://www.microsoft.com/technet/security/guidance/avdind_0.mspx --
Microsoft AntiVirus Defense-in-depth Guide.
-- Todd J Heron, MCSE Windows Server 2003/2000/NT ---------------------------------------------------------------------------- This posting is provided "as is" with no warranties and confers no rights
- Next message: Todd J Heron: "Re: How to remove IE icon from start menu...help"
- Previous message: Todd J Heron: "Re: User and File Management"
- In reply to: Anders Petterĝe: "Remote Procedure Control"
- Next in thread: Anders Petterĝe: "Re: Remote Procedure Control"
- Reply: Anders Petterĝe: "Re: Remote Procedure Control"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|