Blaster Worm Rebooting Patched Machines!

From: Eric Hines <eric.hines(at)appliedwatch.com>
Date: Wed Aug 13 2003 - 10:10:58 EDT

All:

We are seeing patched machines being rebooted by other worm infected hosts. Nick Fitzgerald on the intrusions@ list explained that it's other hosts attempting to infect the patched system and gets the offset wrong based on the 80/20 weighting. Is anyone else seeing this happen?

Eric Hines

---

Eric Hines
CEO, Chairman
Applied Watch Technologies, Inc.
web: http://www.appliedwatch.com
email: eric.hines@appliedwatch.com

---

Direct: (877) 262-7593 - Toll Free x327
Fax: (815) 425-2173
General: (877) 262-7593 (9am-5pm CST)

---

---

---

Received on Wed Aug 13 11:32:52 2003