RE: MSBLASTER Infecting despite 03-026 patch?

>From what I read about it they talk about their Machines having been
hacked, it doesn't seem to have anything to do with the recent blaster worm, a lot of people are just finding out that they have been hacked before this new worm using the same exploit

Bruce Martins
Systems Administrator
EXTEND>>MEDIA
190 Liberty Street
Toronto, Ontario
Canada
M6K 3L5

e:bmartins@extend.com
t: (416) 535-4222 ext. 2307
f: (416) 535-1201

-----Original Message-----
From: Mike Dresser [mailto:mdresser@windsormachine.com] Sent: Tuesday, August 12, 2003 1:49 AM
To: incidents@securityfocus.com

Doesn't the worm install a patch of its own that looks like the MS patch, and in fact uses components from it?

thought I saw that on the SANS list.

http://isc.sans.org/diary.html?date=2003-08-09

---
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
----------------------------------------------------------------------------