I have unicode hacked server, but I don't know how to secure it. And searching net might take valuable time.. Anyone know?

install your favorite back door then transfer the patch ms00-078 over. this can be run from the shell in quiet non-interactive mode and set not to re-boot but of course its not in effedct until it does. ms00-078 /? will show you the switchs you need to use. but unless its behind a firewall its going to take all the service packs and patches ever made to keep others from owning it. if its not being used as a web server but has it on by default you can alway remove iis as a service then net stop or pskill it

delete the c:\inetpub\scripts directory?¿


chances are it has code red and all sorts tooo so might be abit sloow, depends what you are going to use it for?

could block port 80 (if its deault website)

check c:\windir%\system32\logfiles\wsv*\*.log for behaviour too and to handily deleted your loogged sessions and maybe find other servers that are sending
that long data that code red does; for other vulnerable servers you might want to go and look at :-)

i thik silent patch will solve it, and maybe Aphex firewall..
Anyway, you gave me an idea.. If server is vulnaruble to Unicode, then it is vulnaruble to every other High Risk vuln.
I haven't been in scene that long, and can only think of RPC that is sure fire exploit.. Can you tell me some more?

patch it silently with a microsoft path, if you don´t know install silently, cmdshell
"patch.exe /?"

well... to install the part silently I use "patch.exe -q -m"

and dont forget to do this when you are finished cleaning the mess in /scripts /msadc and others exploitable dir