|
|||||
| Green Apple News: Windows MSBlast Worm | |||||
| August 16, 2003 A new worm is spreading quickly through the Internet affecting unpatched Windows 2000 and XP machines. The worm exploits a flaw found in recent Microsoft releases of Windows. Unlike most viruses and worms, MSBlast does not use email (and email attachments) as the means for spreading the infection. Instead, the worm randomly scans the Internet for unpatched systems. When such a system is found, it is infected and then used as an agent for further spreading. Green Apple has disabled certain ports used by
MSBlast as recommended by Microsoft which greatly reduces the capability for
the worm to enter or leave our network and affect our users. However,
every Windows user is urged to visit Microsoft's Windows Update and install
the patch correct this flaw. Windows Update is found at To determine whether your machine is infected
with the worm check the folder "C:\Windows\System32" for the file msblast.exe
or see whether msblast is listed in Task Manager. If you are infected,
in addition to installing the patch you will need to remove the worm with the
Symantec (Norton) removal tool. This tool may be downloaded here If you believe your
computer is infected and could use help, please do not hesitate to
give us a call. As always, Green
Apple users are welcome to bring in their machines for virus scans and virus
removals. For further information on MSBlast, please see For other information resources on MSBlast,
please see
|
|||||
|
|