[Dshield] San Diego County "brought to it's knees" by worm....

Paul Marsh pmarsh at nmefdn.org
Wed Aug 17 14:06:12 GMT 2005

Am I missing something here?  It's all bot warfare, all reports I've read say basically the same thing....
No compromise of data.  Just an idea here but if the systems are infected with these bots, one could bet it's called home and installed something else like rootkits?

Thanx, Paul 

-----Original Message-----
From: list-bounces at lists.dshield.org [mailto:list-bounces at lists.dshield.org] On Behalf Of Fergie (Paul Ferguson)
Sent: Wednesday, August 17, 2005 9:58 AM
To: list at lists.dshield.org
Subject: [Dshield] San Diego County "brought to it's knees" by worm....

I'm sure the worst of this has past, but I still believe that going back to "InfoCon Green" on Monday night was a it premature.

Daniel J. Chacón writes in SignOnSanDiego.com:


An Internet worm that crashed computer systems nationwide wreaked havoc on the county government's network yesterday, shutting down 12,000 desktops and forcing thousands of employees to work the old-fashioned way: manually.

"We're looking at one another and wondering what the heck we used to do before we became so computer dependent," county Supervisor Ron Roberts said.

The worm, which affects Microsoft's Windows 2000 operating system, started to infect county computers at 11 a.m. and prompted officials to disconnect the entire system, county spokesman Michael Workman said.

"At this point, there's been no compromise of data, no compromise of records, but to deal with the problem, you have to shut down," he said.

About 200 people were working overnight installing patches on 3,000 of the "most critical" computers so they would be up by today, he said.



- ferg


"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet  fergdawg at netzero.net or fergdawg at sbcglobal.net  ferg's tech blog: http://fergdawg.blogspot.com/

The information in this transmittal (including attachments, if any) is privileged and confidential and is intended only for the recipient(s) listed above. Any review, use, disclosure, distribution or copying of this transmittal is prohibited except by or on behalf of the intended recipient. If you have received this transmittal in error, please notify me immediately by reply email and destroy all copies of the transmittal. Thank you.

More information about the list mailing list