Security Basics mailing list archives

Re: Purging Blaster.worm


From: "Jay Woody" <jay_woody () tnb com>
Date: Wed, 13 Aug 2003 11:27:41 -0500

All the tools do what they say they will, but most people's argument is,
"If your box was compromised, how do you know what all was done to it
while it was compromised?".  In other words, I find your box and I put a
homemade .exe on there that sends me files, etc.  You run the cleanup
and it cleans up all the known issues.  But it doesn't know to remove my
file, so I sit there all day and screw with you.

If it got compromised, the best answer (security-wise) is to always
rebuild.

JayW

"Jose Guevarra" <jose () iquest ucsb edu> 08/12/03 07:06PM >>>
Hi,

 Has anyone successfully purged the MSBlaster worm. There is a tool
out
there that can do it but is it reliable?

thanx,

============


---------------------------------------------------------------------------
----------------------------------------------------------------------------




---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: