[nsp-sec] Bracing For Impact... MS08-067

[Nicholas Ianelli]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Tom Fischer wrote:
> ----------- nsp-security Confidential --------
> 
> Hi,
> 
> On Fri, Oct 24, 2008 at 09:43:33AM +0200, SURFcert - Peter wrote:
>>>    C:\Documents and Settings\LocalService\Local Settings\Temporary
>>> Internet Files\macnabi.log
>>>    C:\WINDOWS\system32\wbem\basesvc.dll
>>>    C:\WINDOWS\system32\wbem\syicon.dll
>>>    C:\WINDOWS\system32\wbem\winbase.dll
> 
> add
> c:\windows\system32\wbem\sysmgr.dll
> c:\windows\system32\esoba.dat 
> to your MS08-067 related monitoring ...
> 

The following as well:

%SystemRoot%\system32\wbem\winbaseInst.exe

Nick
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iEYEARECAAYFAkkB3uMACgkQi10dJIBjZIAo+wCgkPogBhN0Si5tsRe3qnuZSwDo
L90AnR41cMk84+kSsSRqi2tzldGeN1T/
=tTME
-----END PGP SIGNATURE-----