Greetings,
For as must coverage as there was about the MSBlast worm last week, there
has been little coverage on the "Anti-Blaster" worm named W32.Welchia.Worm
(http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.ht
ml). This worm uses the same vulnerability in Windows NT product line
(including 2000, XP, 2003 Server) to "infect" a machine, remove the MSBlast
worm, download the correct patch (1 of 8) from Microsoft, install the patch
to fix the vulnerability, then tries to seek out other MSBlast infected
PC's. The worm deletes itself on 1/1/2004.
Microsoft has no comment.
Eric A. Isaacson, BSME
eric.isaacson@jbtool.com
JB Tool, Die, and Engineering, Inc.
1509 Dividend Road
Fort Wayne, Indiana 46808
(260) 483-9586 - Office
(260) 483-9589 - Fax
/// datsun-roadsters@autox.team.net mailing list
/// Archives at http://www.team.net/archive
|