dEXE
Čuven
- Učlanjen(a)
- 22.12.2001
- Poruke
- 1,823
- Poena
- 755
Evo sta mi se desilo...
Pre deset dana a evo i juce, kad sam se nakacio na net, pa malo posle iskoci mi na sredini ekrana, windowsow prozorcic i kaze mi nesto tipa dobio je zahtev preko Remote Procedure Call (RPC), i sistem ce da mi se restartuje za 1 minut, i da pogasim sve programe... Prozor je on top, regularan Windowsov na srpskom (posto je win na srpskom) i odbrojava mi sekunde... Nema sanse da se ugasi i restartova me ladno...
Posto ne koristim firewall, reko aj da ga stavim da vidim sta je, instaliram ja Kerio, i za deset minuta imao sam nekoliko pokusaja konekcije preko porta 135... reko aj da vidim sta on radi, i evo sta sam nasao...
Microsoft have announced (16-July-03) a serious vulnerability in all versions of Microsoft operating systems, except Win 98 and Windows ME.
The flaw is related to an error in the way Remote Procedure Call (RPC) protocol is used by the Windows operating system.
There is a vulnerability in the part of RPC that deals with message exchange over TCP/IP. The failure results because of incorrect handling of malformed messages. This particular vulnerability affects a Distributed Component Object Model (DCOM) interface with RPC, which is accessed through TCP port 135.
An attacker who successfully exploited this vulnerability would be able to run code with Local System privileges on an affected system. The attacker would be able to take any action on the system, including installing programs, viewing, changing or deleting data, or creating new accounts with full privileges.
To exploit this vulnerability, an attacker would need to send a specially formed request to the remote computer on TCP port 135, the loc-srv (location-service).
U cemu je fora, neko cuci i skenira net, da bi ljudima restartovo kompove...
Trojanac nije sigurno, jer nemam outgoing samo incoming zahteve... A evo sad se drugarici restartovo 5 puta za pola sata... Jel imao neko slicna iskustva?
Pre deset dana a evo i juce, kad sam se nakacio na net, pa malo posle iskoci mi na sredini ekrana, windowsow prozorcic i kaze mi nesto tipa dobio je zahtev preko Remote Procedure Call (RPC), i sistem ce da mi se restartuje za 1 minut, i da pogasim sve programe... Prozor je on top, regularan Windowsov na srpskom (posto je win na srpskom) i odbrojava mi sekunde... Nema sanse da se ugasi i restartova me ladno...
Posto ne koristim firewall, reko aj da ga stavim da vidim sta je, instaliram ja Kerio, i za deset minuta imao sam nekoliko pokusaja konekcije preko porta 135... reko aj da vidim sta on radi, i evo sta sam nasao...
Microsoft have announced (16-July-03) a serious vulnerability in all versions of Microsoft operating systems, except Win 98 and Windows ME.
The flaw is related to an error in the way Remote Procedure Call (RPC) protocol is used by the Windows operating system.
There is a vulnerability in the part of RPC that deals with message exchange over TCP/IP. The failure results because of incorrect handling of malformed messages. This particular vulnerability affects a Distributed Component Object Model (DCOM) interface with RPC, which is accessed through TCP port 135.
An attacker who successfully exploited this vulnerability would be able to run code with Local System privileges on an affected system. The attacker would be able to take any action on the system, including installing programs, viewing, changing or deleting data, or creating new accounts with full privileges.
To exploit this vulnerability, an attacker would need to send a specially formed request to the remote computer on TCP port 135, the loc-srv (location-service).
U cemu je fora, neko cuci i skenira net, da bi ljudima restartovo kompove...
Trojanac nije sigurno, jer nemam outgoing samo incoming zahteve... A evo sad se drugarici restartovo 5 puta za pola sata... Jel imao neko slicna iskustva?
