Worm strikes down Windows 2000 systems

[TomF]

http://www.cnn.com/2005/TECH/internet/08/16/computer.worm/index.html

WASHINGTON (CNN) -- A computer worm shut down computer systems running the
Windows 2000 operating system across the United States on Tuesday, hitting
computers at CNN, ABC and The New York Times.

Around 5 p.m. computers began crashing at CNN facilities in New York and
Atlanta. ABC said its problems began in New York about 1:30 p.m.

 

[Slarty Bartfast]

If users kept up with MS auto update patches, they would have been OK.
Preferably with SUS.
--


Regards,

Slarty Bartfast



Do Quarter Horses have only 1 leg????

 

[David H. Lipman]

From: "TomF" <[email protected]>

| http://www.cnn.com/2005/TECH/internet/08/16/computer.worm/index.html
|
| WASHINGTON (CNN) -- A computer worm shut down computer systems running the
| Windows 2000 operating system across the United States on Tuesday, hitting
| computers at CNN, ABC and The New York Times.
|
| Around 5 p.m. computers began crashing at CNN facilities in New York and
| Atlanta. ABC said its problems began in New York about 1:30 p.m.
|

Patch the vulnerability associated with MS05-039 Plug-n-Play Vulnerability Exploit
http://www.microsoft.com/technet/security/bulletin/ms05-039.mspx

 

[Tom Pepper Willett]

Dave: Even though NT 4 is out of life and no longer supported, does anyone
know if it is vulnerable to the exploit?

Tom


|
| Patch the vulnerability associated with MS05-039 Plug-n-Play Vulnerability
Exploit
| http://www.microsoft.com/technet/security/bulletin/ms05-039.mspx
|
| --
| Dave
| http://www.claymania.com/removal-trojan-adware.html
| http://www.ik-cs.com/got-a-virus.htm
|
|

 

[Tom Pepper Willett]

I answered my own question:

W32.Zotob.B can run on, but not infect, computers running Windows
95/98/Me/NT4. Although computers running these operating systems cannot be
infected, they can still be used to infect vulnerable computers that they
can connect to.
http://securityresponse.symantec.com/avcenter/venc/data/w32.zotob.b.html

Tom
| Dave: Even though NT 4 is out of life and no longer supported, does
anyone
| know if it is vulnerable to the exploit?
|
| Tom
|
|
||
|| Patch the vulnerability associated with MS05-039 Plug-n-Play
Vulnerability
| Exploit
|| http://www.microsoft.com/technet/security/bulletin/ms05-039.mspx
||
|| --
|| Dave
|| http://www.claymania.com/removal-trojan-adware.html
|| http://www.ik-cs.com/got-a-virus.htm
||
||
|
|

 

[Slarty Bartfast]

When I started work the other day, we had what seemed like a DOS attack. The
Internet slowed down - needed continual refreshing of the Proxy Client to
get a page up, and then eventually couldn't browse the Internet or even our
own network.
When I checked every server and workstation, (50 users, 12 Servers) only one
computer showed any evidence of 'botzor' in it's registry, and that was an
XP SP2 workstation. It wasn't infected, but it must have been the culprit
somehow.
I installed the MS05-039 patch on all the servers, because they don't
auto-boot after a SUS update like the workstations do and were a few days
behind. After that no problem...

--


Regards,

Slarty Bartfast



I'm easy to please as long as I get my way.