KORGO worm anyone ?

[Y_lifter]

Korgo worm tried to get in.
This worm has caused us abnormally high network traffic as we tighten up the routers/f-walls as well as the effort to find the small number of machines with the virus and remove them from the network.

BTW.. The worm only infects machines NOT patched with MS04-011.
Out of 200,000 machines, only 300 have been identified as unpatched.. (dumb Asses)

 

[Code]

Yeah, good luck with that one.

We had two days of downtime last summer while I was out because of worms.


That didn't sound right, but I'll leave it cuz it's funny as hell.

 

[Deterass]

http://www.pediatriconcall.com/KidsCorner/commonill/Worms.asp

 

[Y_lifter]

Usually we get a few infections via VPN by users dialing in using their family PC..
Put the kaibash on that one by turning off VPN access unless you run software verifying patches,dats etc on the machine before connection each time..

For the most part now its simply an annoyance with network slowdowns as the network gets locked down or the gateways are nipple twisted more secure.

We have not had an worm caused outage for almost a year or more..

 

[Code]

We have a point to point with a very large client, and all of our worms have come through that.

And they still argue when we try to put security measures into place to protect ourselves from them.

Usually we get a few infections via VPN by users dialing in using their family PC..
Put the kaibash on that one by turning off VPN access unless you run software verifying patches,dats etc on the machine before connection each time..

For the most part now its simply an annoyance with network slowdowns as the network gets locked down or the gateways are nipple twisted more secure.

We have not had an worm caused outage for almost a year or more..