RE: attacks shutting down windows machines?

["Mike" <mjcarter () ihug co nz>]

Are they getting the windows shut down prompt? If so I would suggest
that they aren't patched against the RPC DCOM vul and are infected or
even if they aren't getting a prompt I think it's still highly possible

-----Original Message-----
From: full-disclosure-admin () lists netsys com
[mailto:full-disclosure-admin () lists netsys com] On Behalf Of
vogt () hansenet com
Sent: Tuesday, 12 August 2003 7:28 p.m.
To: full-disclosure () lists netsys com
Subject: [Full-disclosure] attacks shutting down windows machines?


Hi there -

We are currently receiving a considerable volume of customer reports
where windows machines (XP usually, as its residential customers) are
seemingly shut down remotely. Nothing evil seems to happen, just a
regular system shutdown.

Anyone else seen this? Is someone using the latest exploit to have some
harmless fun?


best regards / mit freundlichen Gruessen,

Tom Vogt
Hansenet Webfarm Security 
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html