| Author |
 Topic  |
|
|
Gremlin
General Help Moderator
New Zealand
7528 Posts |
 Posted - 19 August 2003 : 22:19:20
|
This has to be the weirdness virus notification I've recevied
----------
Virus Warning! W32.Welchia.Worm - Category 4 Virus
This message is intended for customers who have not already protected themselves from the recent W32.Blaster.Worm.
Symantec has upgraded the W32.Welchia.Worm from a Level 2 to a Level 4 threat [On a scale of 1-5, 5 being highest].
The W32.Welchia.Worm targets customers infected with the W32.Blaster.Worm. Once on a system, W32.Welchia.Worm deletes msblast.exe (the W32.Blaster.Worm virus), attempts to download the patch from Microsoft's Windows Update Web site, installs the patch, and then reboots the computer. After the computer restarts the virus propagates through TCP port 135 on Windows XP and Windows 2000 machines that have not patched the Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability.
--------
If I'm reading this correctly it seems to a) remove any msblast infection, b) patch the system eploits, c) move on to try and "fix" another system. |
Kiwihosting.Net - The Forum Hosting Specialists
|
|
|
jfitz
Junior Member
USA
345 Posts |
Posted - 19 August 2003 : 22:44:04
|
| According to Symantec it can also cause system instability. |
--Jördan
It's a wasted day if you don't spend at least part of it flying upside down. |
 |
|
|
Gremlin
General Help Moderator
New Zealand
7528 Posts |
Posted - 19 August 2003 : 22:50:10
|
| That just adds more weight behind my theory that it's MS that made it then *wink* |
Kiwihosting.Net - The Forum Hosting Specialists
|
|
|
|
VodkaFish
Average Member
USA
654 Posts |
Posted - 20 August 2003 : 01:09:34
|
The instability, last I heard, was "unconfirmed". They just don't want to ever say their can be a benign worm. There is one problem with it though: it reboots your machine, which is a pain to most I'm sure.
Still, it's very whitehat-ish of whoever wrote it. |
v ø d k â f ï § h |
|
|
|
Roland
Advanced Member
Netherlands
9335 Posts |
Posted - 20 August 2003 : 08:49:30
|
'Good' worm, new bug mean double trouble on CNet News.com
I loved the statement made by the MIT network manager: "There is a special section of hell reserved for the guys that write these things," |
|
|
| |
Topic |
|
Topic Locked
