Re: DCOM Worm?

["morning_wood" <se_cur_ity () hotmail com>]

could be a missed attempt at an auto rooter ( dcom ) and its auto rooting
the local box on reboot..
just my thought


Donnie Werner
http://e2-labs.com


----- Original Message ----- 
From: "Carl Sager" <orniter () yahoo com>
To: <full-disclosure () lists netsys com>
Sent: Monday, August 11, 2003 12:51 PM
Subject: [Full-disclosure] DCOM Worm?


>    I'm working as a technician and have had 3 people
> from the local area call within the last hour about a
> problem with having their computer shut down after
> giving a one minute warning.  This only happens when
> they have an internet connection - if they boot up
> with a network cable plugged in, even if they don't
> have a browser or any other apps open, it'll shut
> down.  It looks like they're all running NT/2k/XP as
> well - is this a DCOM worm?
>
> __________________________________
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html