MSBlast.exe

[Xilo]

W32.Blaster.Worm is a worm that will exploit the DCOM RPC vulnerability using TCP port 135. It will attempt to download and run a file, msblast.exe.

Infection Length: 6,176 bytes

Systems Affected: Microsoft IIS, Windows 2000, Windows NT, Windows XP

Systems Not Affected: Linux, Macintosh, OS/2, UNIX

For those of you wondering what port 135 is there for, it is none other than the Windows Update Port! Hooray, thanks Microsoft... not only do you open doors, but backdoors as well. The Symantec website listed below has removal instructions for the worm if you are infected. Also be sure to check Windows Update and look under "Critical Updates & Service Packs", this is where the patch is located for this exploit.

Symantec Security Response
Microsoft Window's Update Webpage

(Ya, I know it was discussed in another topic, but it's best to have a topic to keep people informed easier...)

[ooo]

new virus or old? lol i havent updated my norton 2003 definitions in 2 months... :/

OMG I CANT DO A LIVE UPDATE!!!... arg i prob got a virus killin my norton... :/

no wonder my ie hasnt been functioning properly for the last few days.... time to install 2004 :/ hope it works!

[ultimatejester]

Originally posted by Soul814@11 August 2003 - 23:38
new virus or old? lol i havent updated my norton 2003 definitions in 2 months... :/

its a new 1

[RPerry]

W32.Blaster.Worm
Discovered on: August 11, 2003
Last Updated on: August 11, 2003 03:52:23 PM

actually pretty new Soul,

[ooo]

haha im now like 90 percent sure i got a virus! i cant do search.. fug... i've been copyin programs to cd n transferin it between programs... n i didnt feel like puttin an anti virus on one of my com since it had no internet... :/ now i gotta do a check

[MetroStars]

Thanks for the update Xilo.. bastard worm...

[sharedholder]

I formated my disk yesterday I have a nasty virus maybe its this .

[ooo]

DAMN BITCH I WAS WONDERING WHY MY IE WASNT FUNCITONING PROPERLY! I GOT THE DAMN VIRUS!!!!

arg...

i found that hotmail doesnt work yahoo doesnt work... my internet freezes up and i d/ced my internet yet i still dl!... thatz a fag... n i cant click direct links... so to remove this damn virus i gotta type in that long link... :/

i cant do a search... i had to do ctrl + f


ya THANKS XILO!

[AznRocky]

ok i got this folder and its titled $NtUninstallKB823980$ and i'm not sure i should delete it or is hould just leave it alone it has some files that i' not sure i should keep!

[ooo]

umm i cant run my virus scan what now? that sucks... :/... somethings killin my norton... itz not letting my norton do a live update or do a virus scan... ahh!