RE: Zotob Worm Remover

[Ron DuFresne <dufresne () winternet com>]

On Mon, 22 Aug 2005, Todd Towles wrote:

> Wireless really isn't a issue. You can get a worm from a cat 5 as easy
> as you can from wireless. The problem was they weren't patched. Why
> weren't they patched? Perhaps Change policy slowed them down, perhaps it
> was the fear of broken programs..perhaps it was the QA group..it doesn't
> really matter. They go the worm because they were not patched.

And because they didn't properly filter port 445 is my understanding.
Unpatched systems behind FW's that fliter 445 were untouched.

Thanks,

Ron DuFresne
-- 
"Sometimes you get the blues because your baby leaves you. Sometimes you get'em
'cause she comes back." --B.B. King
        ***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/