lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <5.2.1.1.2.20030812014000.05c2e2d8@localhost>
From: scottf at uark.edu (Scott Fendley)
Subject: Symantec has released an MSBLast removal
  tool.

It looks like CA also has released a removal tool.  The SANS Diary at 
http://isc.sans.org/diary.html?date=2003-08-11

Here is the excerpt from that URL:

Once you are infected, we highly recommend a complete rebuild of the site. 
As there have been a number of irc bots using the exploit for a few weeks 
now, it is possible that your system was already infected with one of the 
prior exploits. Do not connect an unpatched machine to a network.

If you can not do this and/or the computer resides on a protected or 
non-Internet connected network, then several Anti-Virus Venders have 
supplied tools to assist in removing the worm. However, these tools can not 
clean-up damage from other RPC DCOM malware such as the recent sdbot irc 
bots. This method of cleaning your system is _not_ recommended, but the 
URLs are presented below for completeness.

<http://www.sarc.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html>http://www.sarc.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html 

http://www3.ca.com/Files/VirusInformationAndPrevention/ClnPoza.zip


At 01:29 AM 8/12/2003 -0400, gml wrote:

>Its about damned time, I guess I can stop writing mine now.
>
>
>
>-----Original Message-----
>From: full-disclosure-admin@...ts.netsys.com 
>[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of ViLLaN
>Sent: Monday, August 11, 2003 11:06 PM
>To: 'Full-Disclosure@...ts.Netsys.Com'
>Subject: [Full-Disclosure] Symantec has released an MSBLast removal tool.
>
>
>
>Hey Guys,
>
>
>
>Symantec has just released a removal tool for MSBLAST.
>
>
>
>Cheers,
>
>Garth S



Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ