[iwar] Historical posting
From: Fred Cohen
From: fc@all.net
To: iwar@onelist.com
Mon, Jan 1, 1999
fc Mon Jan 1, 1999
Received: (from fc@localhost) by all.net (8.9.3/8.7.3) id FAA15269 for iwar@onelist.com; Tue, 18 Apr 2000 05:21:43 -0700
To: iwar@onelist.com
MIME-Version: 1.0
Mailing-List: list iwar@egroups.com; contact iwar-owner@egroups.com
Delivered-To: mailing list iwar@egroups.com
Precedence: bulk
List-Unsubscribe:
Date: Mon, Jan 1, 1999
From: Fred Cohen
Reply-To: iwar@egroups.com
Subject: [iwar] Historical posting
From: Kevin Manson
Re: Self propogating 911 virus: How to turn off sharing?
##########
"The FBI Advisory is posted at
http://www.nipc.gov/nipc/advis00-038.htm
The 911 virus is the first "Windows shares virus."
Unlike recent viruses that propagate though eMail,
the 911 virus silently jumps directly from machine
to machine across the Internet by scanning for, and
exploiting, open Windows shares. After successfully
reproducing itself in other Internet-connected machines
(to assure its continued survival) it uses the machine's
modem to dial 911 and erases the local machine's hard
drive. The virus is operational; victims are already
reporting wiped-out hard drives."
##########
In Win 98:
Go to Control Panel -->
Go to Network -->
Go to File and print Sharing -->
Uncheck boxes for File and print Sharing
My old IBM NT/Linux box is having problems with
booting so would someone else willing to put up a
cheat sheet for turning off sharing for NT?
Still no details re the 911 virus in my mailbox from
NIPC or SANS. I confirmed the NIPC/SANS
advisories I received via email yesterday with the
NIC Watch office in DC yesterday via telephone
It would seem to be quite important to be able to
advise local authorities about how this exploit "looks"
from the perspective of local authorities receiving such
911 calls from infected computers. I'm sending a message
to our local authorities and to network folks at my office.
Regards,
Kevin Manson
mailto:cybercop@m...
http://all.net/cybercop/Files/bio.htm
50 Ways to protect Your Information Assets While Cruising
the Internet
http://all.net/joural/50/cybercop.html
912.267.3249 Office