Security Incidents mailing list archives

RE: Explorer Dr. Watsons


From: "Arnold, Jamie" <harnold () binghamton edu>
Date: Tue, 18 Sep 2001 19:28:08 -0400

We've seen several boxes where drwatson.exe has been renamed to drwatson
.exe (note the space before the dot) and the attribs reset to system and
hidden.  There were 7 other files that we found that have been effected in
the same fashion on these boxes.

Jamie


        **********************************
        "I've had a wonderful time, but this wasn't it." 
        Groucho Marx 
        **********************************



-----Original Message-----
From: Chris Thornberry [mailto:chris () cameronaa com]
Sent: Tuesday, September 18, 2001 3:32 PM
To: incidents () securityfocus com
Subject: Explorer Dr. Watsons


Has anyone been experiencing issues with Dr. Watson Application errors
in EXPLORER.EXE. Ever since this morning and the W32.Nimda.A@mm issue
some of my servers have had issues trying to run anything.

Does anyone know of a relation between the two?

Regards,
Chris

--------------------------------------------
Chris Thornberry MCSE, CCNA, A+
Systems Engineer
Cameron & Associates, Inc.
E-mail:  chris () cameronaa com
--------------------------------------------    



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: