Is this server patched for the DCOM/RPC vulnerability exploited by the Blaster worm (and its variants, like Welchia)???? Sounds like it's not. Did you just set this server up, or is this server just getting on the Internet for the first time in months?
Go here, read up on the patch, download the patch and install it.
http://www.microsoft.com/s
Main Topics
Browse All Topics





by: asyscokidPosted on 2004-02-27 at 07:52:50ID: 10470173
Probably a virus. See:
sinfo/anal yses/w32ra lekab.html mantec.com /avcenter/ venc/data/ w32.hllw.r aleka.html
http://www.sophos.com/viru
http://securityresponse.sy