[unisog] IRC bot outbreaks
mjkits at rit.edu
Thu Jul 25 21:14:15 GMT 2002
Disable windows boxes...oops.. did I say that...
Mark J Kimble
PGP: 80FC 8C3E 3F5B 4797 E4B4 3221 E994 2D22 1AB2 DE04
From: Gary Flynn [mailto:flynngn at jmu.edu]
Sent: Thursday, July 25, 2002 11:42 AM
To: Anderson Johnston
Cc: unisog at sans.org
Subject: Re: [unisog] IRC bot outbreaks
Anderson Johnston wrote:
>If anyone has any good suggestions for user education, beyond using good
>passwords, turning off shares, keeping up with patches and updating the
>anti-virus sigs, please post them. I would love to get something together
>before the students get back.
Disable "Access this computer from the network" for the Adminstrator
account on NT/2K/XP
Use the Microsoft IIS Lockdown and UrlScan toolson IIS web servers.
More information about the unisog