OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
3 Comprehensive links in combat with MSBlaster Worm

From: Geoff Shively (gshivelypivx.com)
Date: Tue Aug 12 2003 - 15:14:47 CDT


More DCOM Fun,
The boards and lists are flooded with data on this little bugger. Almost too
much data, and vital stuff gets lost in the myriad email chains and re:
threads. I summed up these 3 links for easy access. Hope it helps.

DCOM ISS Scanner:
http://www.iss.net/support/product_utilities/ms03-026rpc.php
Microsoft Patches:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp
DCOM Cleaner for Infected Boxen:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

And remember... PATCH and block the ports 135 - 139 -445 - 593

Cheers,

Geoff Shively, CHO
PivX Solutions, LLC

Are You Secure?
http://www.pivx.com