Security Basics mailing list archives
RE: Purging Blaster.worm
From: "Stuart" <secmail () patchsupplier dyndns org>
Date: Thu, 14 Aug 2003 02:10:11 +0100
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Shame that people will take no action against a virus that will do anything from their PC but will sue the guts out of people that prevent it from happening :/ Stu - -----Original Message----- From: Duston Sickler [mailto:dustons () charter net] Sent: 14 August 2003 01:53 To: Stuart; security-basics () securityfocus com Subject: Re: Purging Blaster.worm You would be stepping on a lot of toes by doing that. Not to mention breaking several laws. This hack patch discussion has been had before. The area sounds appealing but when it comes down to who is responsible if the "Patch Worm" breaks my "whatever" it starts to loose its luster. Duston Sickler CompTIA A+ Certified "Cedo nulli." - ----- Original Message ----- From: "Stuart" <secmail () patchsupplier dyndns org> To: <security-basics () securityfocus com> Sent: Wednesday, August 13, 2003 5:14 PM Subject: RE: Purging Blaster.worm
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, Is it not possible to create another worm or modify this worm to actually patch the machines? :) Looking at the Symantec removal tool there is a silent mode.. A few days back I was on the Microsoft site and I also saw an option for a non interaction install for the RPC patch but looking through the site now I cannot find it :( The "fixing worm" could scan for 2 hours then purge itself? Just a thought Stu - -----Original Message----- From: Andreas Rothlauf [mailto:security () bitgui de] Sent: 13 August 2003 21:25 To: security-basics () securityfocus com Subject: Re: Purging Blaster.worm Hi, JG> Has anyone successfully purged the MSBlaster worm. There is a tool out JG> there that can do it but is it reliable? Symantec has made a tool available: http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.to ol.html A friend told me that it works. greetZ //AndY - ---------------------------------------------------------------------- - ----- - ---------------------------------------------------------------------- - ------ -----BEGIN PGP SIGNATURE----- Version: PGP 8.0.2 iQIVAwUBPzq4K5MRMj30dWmZAQIOCBAAy73WqYpzZSyjKb530Gefx+cJ3vhV73RN aiFGkEtN+zaGio14/TWNNgFEDpY3DxNtbQF5GPAtw7OBV61qTsg9NOOxAJioyZV/ qftWulRdv9P7AmJ96c50ge9Gb5bVb2u6w0xIgS8pk5ButD5/z5QOOQ4mK0BRboyP Du4EdphbMQNd6DI1cdWnQV6tX++jtMh2BnUwFSIj7WTwXIpUg4/H9PzJ/TZYx5Ro swymEnfAusWUFWCljBG0PwTdNqFwmy4LWaCHJEIH/2MJ8ZdMlvUza6nX79yn12j6 OmavfnW0uUEX5bp3w4qF9C1b/6C7ajRlzBmqX4gG5iY28fGC+BlPAJgwhndbsJaz id9Za7LhaErG5r3gpJiPL+Xv6nv7PCwBM0p+WhX19d1Z3JUIfmbCHekifLydmwm6 bYnG5tK9oH2K3IgzmM9m5oZYOD4sf/gUrqEGI0oK5md393xdfqv/ce/mS+VvShEk 59yuldmgV6pG8Yg5FF+bKI2lf1f35J4iWRknHEa114i3+PveJgSOtMdR71h7Rrnk 8j829JAtN66Z8Ndf14U2mtMmKlIIkoiq6lnc5kvq5tjKjJFTODlR70VPWfT/fu7+ C+MZulc55R2ZBp4cDe0ZriNtv9rEqWykQfc2GgIxTYvYYK1M3/861cnsoPCHudVS 37cjHXHGHds= =eKYz -----END PGP SIGNATURE----- -------------------------------------------------------------------- ------
- -
-------------------------------------------------------------------- ------
- --
-----BEGIN PGP SIGNATURE----- Version: PGP 8.0.2 iQIVAwUBPzrhc5MRMj30dWmZAQIFHRAAmkq7TDMR6VAja7ZV67felnS4FgonZcCO dfgu4jJVzUzay55/sFzWoddd0JhmUwfXKFLlu5Z5aUy/ntf7P58rNP/2nML/+Sol P+6YaQZrw8wta0xvXF6PQI4PkCa4ZlkC4wprEAfy2WxqvVul3B96U9ejxJzDLa4f JFGz2ONE/ghC4/Ftp030c0G35L+d8i9JIHDVd92pyqIgHOuqTRKjrNcbJjU6c+0T alIZEBPqhUtXEQS5/ypx7XYA7wv5/Xzqt8rtqcd7IoT7rVPhDM/T/nkBWCayzzsm I/TYcIKQ1JCd11Y4lezwVoNZh7H1sOpA9BGu2G4OGPfHSc05dHmYyJ2p0kaIgFDL A/3C1gOqGTxy5nv3d+GfajSG+zZrUM5844Xo6RvmYt932LWuSplTiASd/W9VEEX4 E5tpChODZEqrUwmkH1IelXM2rzhMemY+VH0I3DWNXmhJRCvKRYg2xdwr8ddO2xyx 9FYWydp+GzPtnc9GMfvEIsLdnW8KnstWHeLuxCcERbDwVSXljUtxF47goPIWw7eI J9AumJFIPwLFXNgn+HWGbLtZ9Pfte3/MZJ9DKg6VseOQ4V/B5nqKBMOzT9++pw/G OeNR9yOVzLfRR2rAkF7AFw6K30XgG00PwVHwcu26FuRRxqP4y1U4SYujqJE/DfTz ZPS0QkaR8QI= =cl9A -----END PGP SIGNATURE----- --------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- RE: Purging Blaster.worm, (continued)
- RE: Purging Blaster.worm Johannes Lemmerer (Aug 13)
- Re[2]: Purging Blaster.worm Michael Thompson (Aug 14)
- RE: Purging Blaster.worm Mark Harris (Aug 13)
- Re: Purging Blaster.worm Andreas Rothlauf (Aug 13)
- Re: Purging Blaster.worm Schneider Sebastian (Aug 13)
- Re: Purging Blaster.worm Todd (Aug 14)
- Re: Purging Blaster.worm Schneider Sebastian (Aug 14)
- RE: Purging Blaster.worm Stuart (Aug 13)
- RE: Purging Blaster.worm Andrew Hecox (Aug 14)
- Re: Purging Blaster.worm Duston Sickler (Aug 14)
- RE: Purging Blaster.worm Stuart (Aug 14)
- Re: Purging Blaster.worm Todd (Aug 14)
- RE: Purging Blaster.worm Alexander Suhovey (Aug 16)
- RE: Purging Blaster.worm TheFueley (Aug 15)
- Re: Purging Blaster.worm Meritt James (Aug 15)
- RE: Purging Blaster.worm Stuart (Aug 16)
- Re: Purging Blaster.worm Schneider Sebastian (Aug 13)
- RE: Purging Blaster.worm Johannes Lemmerer (Aug 13)
- Re: Purging Blaster.worm Meritt James (Aug 14)
- Re: Purging Blaster.worm Meritt James (Aug 19)
- RE: Purging Blaster.worm David Gillett (Aug 19)
- Ethics Question Mike Taylor (Aug 21)
- Re: Ethics Question Adam Newhard (Aug 21)