Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | RE: Shutdown from NT-AUTHORITY\... = virus/attack? |
|---|---|
| Date: | Thu, 9 Sep 2004 14:54:21 -0500 |
With a little foresight, one could have SP2 on CDRom and install it without connecting to the internet. However I wouldn't expect a normal user to take these steps. -----Original Message----- From: Matthew.van.Eerde@hbinc.com [mailto:Matthew.van.Eerde@hbinc.com] Sent: Thursday, September 09, 2004 12:26 PM To: focus-virus@securityfocus.com Subject: RE: Shutdown from NT-AUTHORITY\... = virus/attack? -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Nick FitzGerald wrote:
_How_ will he stay connected to WindowsUpdate, etc long enough to download the necessary patches if his machine is connected to a LAN, or straight to the Internet, where LSASS-exploiting malware is running rife? Experience to date suggests that typically you have only a
few
minutes, at most, between shutdowns in such situations and it takes much longer than that to get the patches...
A good point. It would be nice if Microsoft offered a toll-free dial-up
number for access only to Windows Update.
Perhaps an enterprising ISP will recognize the need for such a service
and set up a (900) dial-up number...
Matthew.van.Eerde@hbinc.com 805.964.4554 x902
Hispanic Business Inc./HireDiversity.com Software Engineer
perl -e"map{y/a-z/l-za-k/;print}shift" "Jjhi pcdiwtg Ptga wprztg,"
-----BEGIN PGP SIGNATURE-----
Comment: pub key http://matthew.vaneerde.com/pgp-public-key.asc
iD8DBQFBQJIgUQQr0VWaglwRArpiAKDXPiddPrvQHVZUVovnLvNKmH2MgACgsd0N
foEEAsUs+uWMP6fXlZFtopw=
=X7vY
-----END PGP SIGNATURE-----
| Previous by Date: | RE: remotely took over computer, Steven McLaughlin |
|---|---|
| Next by Date: | RE: remotely took over computer, Mauricio Fernandez |
| Previous by Thread: | RE: Shutdown from NT-AUTHORITY\... = virus/attack?, Matthew.van.Eerde |
| Next by Thread: | RE: Shutdown from NT-AUTHORITY\... = virus/attack?, Nick FitzGerald |
| Indexes: | [Date] [Thread] [Top] [All Lists] |