new variant of msblast.exe?

[Detector]

i got an email from a reliable source - thought you might want to know. :/


News 13/08/2003 7:42pm est:

Following what must be one of the most virrulent computer viruses in a decade Microsoft
tonight issued a warning about a new and more deadly variant, known at the moment as
only Bride45 this new variant not only infects a pc without the user having to do anything
but also infects email, steals passwords and more serious checks for any credit card
details on the victims PC's. At first glance the new worm acts exactly like the MSblast
worm (also known as LoveSAN), and is thought to be currently infecting pc's at a rate
of 25,000 per hour.
Closer inspection of the new variant worm has revealed that all information gathered
by the new worm gets sent to an email address in Pakistan, both FBI and Pakistani
law enforcment agencies are working on the case even at this early stage.

If you think you have been infected please download an up to date virus checker and
one of the many free firewall's currently available. A fix for the security hole is available
on Microsoft's website now.

[unclex]

not seen this yet - will keep a look out - getting hit all night on my server


will have to look at the snort logs in the morning

[{film_man}]

good week for ms yet again lol

[unclex]

Ok there is a new one that explotes the MS patch

No new info at this time

ZA firewall older version let's it in.

[marcode]

411 attempts in like 4 hours

just done a fresh install this afternoon (nothing to do with blaster, its been coming for a while) and just installed ZApro atm till i can be arsed with anything else

theres nothing on here cept a couple of downloads going just now so it doesnt really matter but 3.0.118 seems to be holding up ok atm.

[ABCMan]

whats realy weird is i havent had a single firewall hit in 70 hours.

peerguardian has picked up a few attempted riaa/mpaa hits but other than that everything seems to be running smoothly

[Tuckerisgreat]

guess the virus doesnt like me ive not been affected

[drdude]

2344 Intrusions have been blocked since install (12/8/2003)
606 of these have been high-rated

Blimey. Computer's only been on for around 20 hours since then

<edit> Have M$ taken down Windows Update for a bit?

Thank you for your interest in Windows Update

Windows Update is the online extension of Windows that helps you get the most out of your computer.

The latest version of Windows Update is available on computers that are running Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium Edition, Windows 2000 (except Windows 2000 Datacenter Server), Windows XP, and the Windows Server 2003 family.

[crack_it]

Got me

Deleted the value "windows auto update" from the registry key
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run".

The tool has deleted the viral file "C:\WINDOWS\system32\msblast.exe".

W32.Blaster.Worm has been successfully removed
from your computer!

Here is the report:

The total number of the scanned files: 64028
The number of deleted files: 1
The number of repaired files: 0
The number of viral processes terminated: 0
The number of registry entries fixed: 1

[Aido]

There's a new RPC virus out that actually applies the patches once it's overflowed the DCOM Exploit and fixes the problem - sweet !

[DEC2K]

801 attempts to access my pc i've only been on like 2 hours 20 mins

:O(

also got free avp hope it holds

819 now