IWETHEY v. 0.3.0 | TODO
1,095 registered users | 1 active user | 0 LpH | Statistics
Login | Create New User
IWETHEY Banner

Welcome to IWETHEY!

New Don't remove nachi... it's a good worm
Really... [link|http://www.microsoft.com/security/antivirus/nachi.asp|http://www.microsoft...tivirus/nachi.asp]
I found it on one of my 2k servers last week (behind three firewalls - border router and sidewinder - running MacAffee Personal Firewall) Must have been when the fscker was booting up the very first time behind the NAT... Note to Win Admins... The frigging 10 seconds before MacAffee Firewall loads is more than enough time to be hacked. Pull the plug on your servers after reboot until desired time (or disable the nic).

Speaking of W2K administration - I'm getting sick of patching W2K machines. It's a full time job. Just reading the security bulletins on a semi-weekly basis is tiresome. The server that got nachi has only 25 out, 80 and 443 open. All services (cept iis and SQL) have been turned off... How do you protect against this shit?

Think about it. The "cracker/hacker/whatever" that wrote nachi was trying to help us out... Just bitching. Never mind.
Just a few thoughts,

Screamer


But take your time, think a lot,
Why, think of everything you've got.
For you will still be here tomorrow, but your dreams may not.


Y. Islam - Father and Son
New Remove nachi... it's a bad worm
Network administrators found Nachi created more network traffic than Blaster did and brought operations to a crawl in some cases.
[link|http://www.aaxnet.com|AAx]
New It killed our network here
Effectively an internal DoS. Nice? My ass!
-----
Steve
New Poor attempt at sarcasm on my part?
I'm getting the feeling that the payload of nachi is an in your face "feeling sorry for you poor bastards"... No doubt that it creates traffic. Fortunately for me, all my firewalls stopped it from showing that side of itself. Hey, at least the firewalls are good for something...
Just a few thoughts,

Screamer


But take your time, think a lot,
Why, think of everything you've got.
For you will still be here tomorrow, but your dreams may not.


Y. Islam - Father and Son
     W2KPro loses connectivity after 5 mins on dial-up. - (Meerkat) - (9)
         Try Knoppix if possible - (kmself)
         Did you try this: - (orion)
         sounds like a worm -NT - (deSitter)
         Does the ISP use a windoze RAS? - (boxley)
         Problem solved (so far) - (Meerkat) - (4)
             Don't remove nachi... it's a good worm - (screamer) - (3)
                 Remove nachi... it's a bad worm - (Andrew Grygus) - (2)
                     It killed our network here - (Steve Lowe)
                     Poor attempt at sarcasm on my part? - (screamer)

Powered by a Mad Hatter 10/6 hat!
38 ms