[rescue] Fair Warning RPC Worm
rwalkup at cheqnet.net
Thu Aug 14 04:55:49 CDT 2003
On Tuesday, August 12, 2003, at 12:42 PM, Kevin wrote:
> Does anyone know if this worm would affect machines that are being
> used by users lacking administrative privileges? Not having your
> users in the local admin group helps with some viri but i'm not so
> sure about this one.
That depends what you mean; it's common practice at my university to
make the primary user of a W2000 box a member of the admin group for
that box, but not the domain. We had plenty of boxes hacked. It
pushed us into installing our firewall earlier than originally planned.
More information about the rescue