Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | MyDoom/Zindos removal tool offered erroneously via AutomaticUpdates? |
|---|---|
| Date: | Fri, 13 Aug 2004 09:11:37 +1000 |
On one of my home PCs - which is behind the correctly-configured firewall in my dsl modem, and also uses the Windows XP firewall, - and which always gets updated with AutomaticUpdates, has (and always has had) up-to-date virus protection, I was offered the MyDoom and Zindos Removal tool in WindowsUpdate as a Critical Update. http://support.microsoft.com/?kbid=836528 I clicked on the more information link and was told that if I'm being offered this, it is because I'm likely infected with the worm. Anyway, (surprise surprise), running the tool didn't find any infection. Neither did a full scan with Norton Antivirus using current definitions. Has anyone else been offered this download? I'd love to know what criteria they used to determine I was infected. I note that Zindos.A is used to create a date-triggered DoS attack against Microsoft.com.. perhaps they are being over-cautious.. Glenn ----- NTBugtraq Editor's Note: Want to reply to the person who sent this message? This list is configured such that just hitting reply is going to result in the message coming to the list, not to the individual who sent the message. This was done to help reduce the number of Out of Office messages posters received. So if you want to send a reply just to the poster, you'll have to copy their email address out of the message and place it in your TO: field. -----
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: XP SP2 nmap incompatibility, Joe Doyle |
|---|---|
| Next by Date: | Re: XP SP2 - Statement of the NTBugtraq list, Nick FitzGerald |
| Previous by Thread: | Windows XP SP2: Hang on ASUS P4P800-E Deluxe with Intel with BIOS older than v1002, Jannie Hanekom |
| Next by Thread: | Re: MyDoom/Zindos removal tool offered erroneously via AutomaticUpdates?, Russ |
| Indexes: | [Date] [Thread] [Top] [All Lists] |