Re: [Full-Disclosure] attacks shutting down windows machines?

[tom@doctorunix.com]

The current blaster infection pops up a "shutting down in 60 seconds due to RPC
failure" box.  The host is compromised.  on XP we find
c:\windows\system32\msblast.exe as the carrier.

tc

Quoting vogt@hansenet.com:

> Hi there -
> 
> We are currently receiving a considerable volume of customer reports where
> windows
> machines (XP usually, as its residential customers) are seemingly shut down
> remotely. Nothing evil seems to happen, just a regular system shutdown.
> 
> Anyone else seen this? Is someone using the latest exploit to have some
> harmless fun?
> 
> 
> best regards / mit freundlichen Gruessen,
> 
> Tom Vogt
> Hansenet Webfarm Security
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
> 




-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html