<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://msmvps.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Security Manifest : Security (Very Urgent)</title><link>http://msmvps.com/blogs/trafton/archive/tags/Security+_2800_Very+Urgent_2900_/default.aspx</link><description>Tags: Security (Very Urgent)</description><dc:language>en</dc:language><generator>CommunityServer 2008.5 SP2 (Build: 40407.4157)</generator><item><title>OUTBREAK: Zotob.E (IRCBot) worm hitting unpatched systems</title><link>http://msmvps.com/blogs/trafton/archive/2005/08/16/62937.aspx</link><pubDate>Tue, 16 Aug 2005 22:18:00 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:62937</guid><dc:creator>trafton</dc:creator><slash:comments>0</slash:comments><description>&lt;P&gt;A new worm utilizing the MS05-039 vulnerability has became a major outbreak.  More coverage upcoming.&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Details&lt;BR&gt;&lt;/STRONG&gt;IRCBot is a fast-spreading worm affecting systems not patched for the MS05-039 vulnerability.  Infected machines will reboot frequently, as well as connect to an IRC server and await further instructions&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Protection&lt;BR&gt;&lt;/STRONG&gt;Detection of this worm, as it is an outbreak, should be released very soon, if it is not already out.&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;The Gist&lt;BR&gt;&lt;/STRONG&gt;IRCBot is an urgent outbreak and all systems should be patched that have not already been.&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Links&lt;BR&gt;&lt;/STRONG&gt;&lt;A href="http://vil.mcafeesecurity.com/vil/content/v_135491.htm"&gt;McAfee&lt;/A&gt; - Write-up.&lt;/P&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://msmvps.com/aggbug.aspx?PostID=62937" width="1" height="1"&gt;</description><category domain="http://msmvps.com/blogs/trafton/archive/tags/VIRUSES/default.aspx">VIRUSES</category><category domain="http://msmvps.com/blogs/trafton/archive/tags/SECURITY/default.aspx">SECURITY</category><category domain="http://msmvps.com/blogs/trafton/archive/tags/Security+_2800_Medium_2900_/default.aspx">Security (Medium)</category><category domain="http://msmvps.com/blogs/trafton/archive/tags/Security+_2800_Urgent_2900_/default.aspx">Security (Urgent)</category><category domain="http://msmvps.com/blogs/trafton/archive/tags/Viruses+_2800_Medium_2900_/default.aspx">Viruses (Medium)</category><category domain="http://msmvps.com/blogs/trafton/archive/tags/Viruses+_2800_Urgent_2900_/default.aspx">Viruses (Urgent)</category><category domain="http://msmvps.com/blogs/trafton/archive/tags/Security+_2800_Very+Urgent_2900_/default.aspx">Security (Very Urgent)</category><category domain="http://msmvps.com/blogs/trafton/archive/tags/Viruses+_2800_Very+Urgent_2900_/default.aspx">Viruses (Very Urgent)</category></item><item><title>W32/Sasser Spreading Quickly</title><link>http://msmvps.com/blogs/trafton/archive/2004/05/01/5763.aspx</link><pubDate>Sat, 01 May 2004 13:48:00 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:5763</guid><dc:creator>trafton</dc:creator><slash:comments>5</slash:comments><description>&lt;h3&gt;&lt;font color="#ff0000"&gt;BREAKING NEWS:&lt;/font&gt; Sasser Goes Medium&lt;/h3&gt;
&lt;p&gt;McAfee has just upgraded W32/Sasser.worm (which uses MS04-011) to Medium risk reflecting the amount it has spread. I personally have received a number of reports of this worm being in the wild. All users should upgrade immediately. A new Stinger detection is available that covers this. Also, the Internet Storm Center has declared Infocon Yellow to reflect the global spread.&lt;br /&gt;&lt;br /&gt;&lt;strong&gt;McAfee Description&lt;br /&gt;&lt;/strong&gt;&lt;a href="http://us.mcafee.com/virusInfo/default.asp?id=description&amp;amp;virus_k=125007"&gt;http://us.mcafee.com/virusInfo/default.asp?id=description&amp;amp;virus_k=125007&lt;/a&gt;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://msmvps.com/aggbug.aspx?PostID=5763" width="1" height="1"&gt;</description><category domain="http://msmvps.com/blogs/trafton/archive/tags/VIRUSES/default.aspx">VIRUSES</category><category domain="http://msmvps.com/blogs/trafton/archive/tags/SECURITY/default.aspx">SECURITY</category><category domain="http://msmvps.com/blogs/trafton/archive/tags/Security+_2800_Medium_2900_/default.aspx">Security (Medium)</category><category domain="http://msmvps.com/blogs/trafton/archive/tags/Security+_2800_Urgent_2900_/default.aspx">Security (Urgent)</category><category domain="http://msmvps.com/blogs/trafton/archive/tags/Viruses+_2800_Medium_2900_/default.aspx">Viruses (Medium)</category><category domain="http://msmvps.com/blogs/trafton/archive/tags/Viruses+_2800_Urgent_2900_/default.aspx">Viruses (Urgent)</category><category domain="http://msmvps.com/blogs/trafton/archive/tags/Security+_2800_Very+Urgent_2900_/default.aspx">Security (Very Urgent)</category></item></channel></rss>