RE: worm question

RE: worm question

 

  

I believe that tool only applies to the spida worm of several months ago. I used this tool and if memory serves, it simply attempts to log in to a sql server on port 1433 with a null sa password. It's a slick little tool for that though, and the price is right.
-Vince

-----Original Message-----
From: Elecia Ezell [mailto:[Email Address Removed] Tuesday, January 28, 2003 4:24 PM
To: LazyDBA.com Discussion
Subject: RE: worm question


For more information and to download the free SQL Worm Detection Tool:
http://www.eeye.com/html/Research/Tools/sqlworm.html

This worked for us.
Elecia

-----Original Message-----
From: Melissa Faga [mailto:[Email Address Removed] Tuesday, January 28, 2003 4:51 PM
To: LazyDBA.com Discussion
Subject: worm question


Can/did the worm have any impact on MS SQL Server 7.0? I have 7.0 installed
on a number of internal and external SQL servers with various service packs
on them. How can I tell if we were hit by the worm? I have seen no
evidence of the worm. Network traffic seems normal.

Any help is appreciated.

Thanks,
Melissa


Melissa Faga
GIS/DB Manager
City of Redmond
425-556-2134
[Email Address Removed] REPLY TO EVERBODY , PLEASE CLICK REPLY-ALL, NOT JUST REPLY
To unsubscribe, e-mail: mssqldba-[Email Address Removed] additional commands, e-mail: mssqldba-[Email Address Removed] NOTICE: The information contained in this message is legally privileged and confidential information intended for the use of the individual or entity named above. If the reader of this message is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any release, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the author immediately by replying to this message and delete the original message. Thank you.
MS Sql Server LazyDBA home page