Merged: W32 Blaster Virus

[blackthorn]

Terrible browsing speeds here in wirral area

[Ste Riley]

There's an XP bug thats hit the services at the moment if you check the NTL service page.

Ive had mates complaining about this for a few hours.

My guess is its a virus doing the rounds and its hitting some big boy servers.

[Shaun]

Originally posted by SteRiley
There's an XP bug thats hit the services at the moment if you check the NTL service page.

Ive had mates complaining about this for a few hours.

My guess is its a virus doing the rounds and its hitting some big boy servers.

I'd have a quick wiz round the net to see if I can find any information on it but it is so painfully slow.

Wonder if it'll be any better in the morning?

I despise bloody viruses.

[Ste Riley]

NTL Have posted news that the following virus is doing the rounds and is a possible cause to tonights problems:

W32.Blaster.Worm
http://securityresponse.symantec.com...ster.worm.html

It hits your 135 port which i have recived a load of requests from tonight that my routers stopped thankfully.

[Richard M]

http://slashdot.org/article.pl?sid=03/08/11/2048249

[Shaun]

Originally posted by SteRiley
It hits your 135 port which i have recived a load of requests from tonight that my routers stopped thankfully.

Really? *goes off to check firewall logs

Originally posted by dellwear
Really? *goes off to check firewall logs

did that - usual, my son hammering my firewall with his P2P - he is not sharing with me..... lol

[Emperordalek]

Another NTL joke as it says that this worm/virus was discovered today!

The patch has been available since mid July!

[Richard M]

http://isc.incidents.org/

[BBKing]

NTL joke? It's a flaw in a Microsoft OS that was patched by Microsoft in July. What on earth have ntl got to do with it? Should they go round and port scan everyone's PC for vulnerabilities?

The *exploit* of the flaw is new in the last few hours, in fact a google for msblast.exe (the filename) came up as blank for me about 4 hours ago, since when ntl have put a status up for it as a large number of calls have come in apparently. We're quick off the mark IMHO.

[Shaun]

11/08/2003 23:35:52,"Rule ""Default Block EPMAP"" stealthed
11/08/2003 23:35:06,"Rule ""Default Block EPMAP"" stealthed
11/08/2003 23:32:38,"Rule ""Default Block EPMAP"" stealthed
11/08/2003 23:31:36,"Rule ""Default Block EPMAP"" stealthed
11/08/2003 23:31:35,"Rule ""Default Block EPMAP"" stealthed
11/08/2003 23:31:07,"Rule ""Default Block EPMAP"" stealthed
11/08/2003 23:31:06,"Rule ""Default Block EPMAP"" stealthed
11/08/2003 23:30:57,"Rule ""Default Block EPMAP"" stealthed
11/08/2003 23:28:40,"Rule ""Default Block EPMAP"" stealthed
11/08/2003 23:28:27,"Rule ""Default Block EPMAP"" stealthed
11/08/2003 23:28:19,"Rule ""Default Block EPMAP"" stealthed
11/08/2003 23:26:02,"Rule ""Default Block EPMAP"" stealthed

Nortons been busy this evening!

[Richard M]

I feel a thread merge coming on...

[ian@huth]

Why do over 99% of the attacks come from NTL (including Virgin) customers?

[Shaun]

http://www.informationweek.com/story...cleID=13000581

[kronas]

oh joy spent 4 hours at mates house trying to sort it stumbled home now and found this