|
In the last 24-48 hours, an Internet worm
has started making the rounds, exploiting a recent vulnerability in
the DCOM-RPC service in Windows NT 4.0, Windows 2000, Windows XP,
and Windows 2003. If your computer is exhibiting strange behavior,
such as giving messages about RPC errors and shutting down on its
own in about a minute after reporting a bunch of strange messages,
then you are most likely being affected by it. Updating your virus
scanner may not be of much use, as the worm will continue to attempt
to re-infect your computer as long as the vulnerability exists.
Updating your firewall MAY help, but the recommended solution is to
IMMEDIATELY download and install the following patch:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp
Also, if you are affected, a removal tool is here:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html
Note that systems not connected to the Internet will not be affected
by the worm, but should still be patched anyway as a precaution.
|