[iwar] Historical posting
From: Fred Cohen
From: fc@all.net
To: iwar@onelist.com
Mon, Jan 1, 1999
fc Mon Jan 1, 1999
Received: (from fc@localhost) by all.net (8.9.3/8.7.3) id FAA15269 for iwar@onelist.com; Tue, 18 Apr 2000 05:21:43 -0700
To: iwar@onelist.com
MIME-Version: 1.0
Mailing-List: list iwar@egroups.com; contact iwar-owner@egroups.com
Delivered-To: mailing list iwar@egroups.com
Precedence: bulk
List-Unsubscribe:
Date: Mon, Jan 1, 1999
From: Fred Cohen
Reply-To: iwar@egroups.com
Subject: [iwar] Historical posting
>My old IBM NT/Linux box is having problems with
>booting so would someone else willing to put up a
>cheat sheet for turning off sharing for NT?
Start -> Programs -> Administrative Tools (Common) -> User Manager
Policy -> User Rights
Select "Access this computer from the network"
Remove the users you don't want accessing the computer via the network.
(Safest to remove all users, remove "Everyone" at the minimum.)
Click OK. Close User Manager.
Kevin!
At 12:17 PM 4/2/2000 -0700, Fred Cohen wrote:
>
> From: Kevin Manson
> Re: Self propogating 911 virus: How to turn off sharing?
>
> ##########
> "The FBI Advisory is posted at
>
> <http://www.nipc.gov/nipc/advis00-038.htm>http://www.nipc.gov/nipc/advis00
> -038.htm
>
> The 911 virus is the first "Windows shares virus."
> Unlike recent viruses that propagate though eMail,
> the 911 virus silently jumps directly from machine
> to machine across the Internet by scanning for, and
> exploiting, open Windows shares. After successfully
> reproducing itself in other Internet-connected machines
> (to assure its continued survival) it uses the machine's
> modem to dial 911 and erases the local machine's hard
> drive. The virus is operational; victims are already
> reporting wiped-out hard drives."
> ##########
>
> In Win 98:
>
> Go to Control Panel -->
> Go to Network -->
> Go to File and print Sharing -->
>
> Uncheck boxes for File and print Sharing
>
> My old IBM NT/Linux box is having problems with
> booting so would someone else willing to put up a
> cheat sheet for turning off sharing for NT?
>
> Still no details re the 911 virus in my mailbox from
> NIPC or SANS. I confirmed the NIPC/SANS
> advisories I received via email yesterday with the
> NIC Watch office in DC yesterday via telephone
>
> It would seem to be quite important to be able to
> advise local authorities about how this exploit "looks"
> from the perspective of local authorities receiving such
> 911 calls from infected computers. I'm sending a message
> to our local authorities and to network folks at my office.
>
> Regards,
>
> Kevin Manson
> mailto:cybercop@m...
> <http://all.net/cybercop/Files/bio.htm>http://all.net/cybercop/Files/bio.htm
> 50 Ways to protect Your Information Assets While Cruising
> the Internet
>
<http://all.net/joural/50/cybercop.html>http://all.net/joural/50/cybercop.html
> 912.267.3249 Office
>
> ----------
> ------------------
> <http://all.net/>http://all.net/
[Non-text portions of this message have been removed]