[Full-disclosure] Virus Outbreak Attacking MS05-039 WIN2K
Mike
mjcarter at ihug.co.nz
Mon Aug 15 14:43:15 BST 2005
Hi List,
Yesterday one of my customers was hit hard by what appears to be a variant
of zotob.
http://securityresponse.symantec.com/avcenter/venc/data/w32.zotob.b.html
This one was very (noisy) crashing services.exe and forcing re-boots on
unpatched WIN2K machines. The boxes we've had a chance to look at were not
infected, but were unpatched. We hope to have samples today from the same
network and have a closer look.
It's time to get patching!
Mike
Information Security and Logistics
www.infosec.co.nz
Full-Disclosure is hosted and sponsored by Secunia.