MSBlast variant plugs hole

[dsmcd]

Hello...

It's happened again. A worm that's supposed to be helpful
http://news.com.com/2100-1002_3-5065117.html?tag=fd_top

<snip>
A variant of MSBlast spread on Monday, but the new worm has
an odd twist: It applies a patch for the vulnerability that
it and other MSBlast worms use to infect Windows systems.
The new worm, dubbed W32.Welchia, W32/Nachi and
Worm_MSBlast.D, appears to properly download the patch for
both Windows 2000 and Windows XP from Microsoft's Web site.
Moreover, the variant will delete itself the first time an
infected computer starts up in 2004.
<snip>

D.

 

[=?ISO-8859-1?Q?=BBQ=AB?=]

It's happened again. A worm that's supposed to be helpful
http://news.com.com/2100-1002_3-5065117.html?tag=fd_top

Heh. I missed your post and just posted this to a.c.v. Some more
links:

<http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MSBLAST.D>

<http://vil.nai.com/vil/content/v_100559.htm>

<http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html>

<http://www.f-secure.com/v-descs/welchi.shtml>

 

[Robert de Brus]

X-No-Archive: Yes

In dsmcd <[email protected]> typed
|| Hello...
||
|| It's happened again. A worm that's supposed to be helpful
|| http://news.com.com/2100-1002_3-5065117.html?tag=fd_top
||
|| <snip>
|| A variant of MSBlast spread on Monday, but the new worm has
|| an odd twist: It applies a patch for the vulnerability that
|| it and other MSBlast worms use to infect Windows systems.
|| The new worm, dubbed W32.Welchia, W32/Nachi and
|| Worm_MSBlast.D, appears to properly download the patch for
|| both Windows 2000 and Windows XP from Microsoft's Web site.
|| Moreover, the variant will delete itself the first time an
|| infected computer starts up in 2004.
|| <snip>
||
|| D.

Except that it still enters one's machine illegally, as well as generating
more unneeded network and internet traffic.

when they get caught they should all get the same penalty, no matter what
the intent. LIFE!

 

[GSV Three Minds in a Can]

Bitstring <[email protected]>, from the wonderful

when they get caught they should all get the same penalty, no matter what
the intent. LIFE!

What a waste of public funds. Go for the alternative.

 

[Memnoch]

Bitstring <[email protected]>, from the wonderful


What a waste of public funds. Go for the alternative.

Yes. Hard labour. I can think of no worse punishment than them being forced to
work at Microsoft beta testing patches.

 

[FromTheRafters]

Yes. Hard labour. I can think of no worse punishment than them being forced to
work at Microsoft beta testing patches.

You mean Microsoft beta tests patches!?
....maybe they should do that with the rest of their software too.

 

[GSV Three Minds in a Can]

Bitstring <[email protected]>, from the

Yes. Hard labour. I can think of no worse punishment than them being forced to
work at Microsoft beta testing patches.

Hard Labour is not an =alternative= to Life - you can do both at once. I
was thinking of the other thing, the D-word. 8>. Definitely cuts down on
repeat offenders.

 

[Memnoch]

Bitstring <[email protected]>, from the


Hard Labour is not an =alternative= to Life - you can do both at once. I
was thinking of the other thing, the D-word. 8>. Definitely cuts down on
repeat offenders.

Two words for you. Birmingham Six. And another two. Guildford Four.