RE: RE: Probable new MS DCOM RPC worm for Windows

["Schmehl, Paul L" <pauls () utdallas edu>]

> -----Original Message-----
> From: Cael Abal [mailto:lists () onryou com] 
> Sent: Thursday, September 25, 2003 9:57 AM
> To: full-disclosure () lists netsys com
> Subject: Re: [Full-disclosure] RE: Probable new MS DCOM RPC 
> worm for Windows
>
> Did you use a third-party tool to verify the patches were actually 
> successfully installed on the infected machines, before detecting the 
> infection?
No, I used four.  Microsoft's commandline scanner, eEye's free Retina
tool, ISS's scanner and GFI's Languard scanner.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/ 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html