W32.Blaster.B/C - Rischio 3 - Update

[Giorgius]

Il Testo (per ora in inglese)

Subject line: updated
Message text: Dear customer:
At 11:34 A.M. Pacific Time on August 13, Microsoft began investigating a worm reported by Microsoft Product Support Services (PSS). A new worm commonly known as W32.Blaster.Worm has been identified that exploits the vulnerability that was addressed by Microsoft Security Bulletin MS03-026.

Questa Mail ha in allegato il file "03-26updated.exe", che contiene un Trojan, il "Troj/Graybird-A"
http://www.sophos.com/virusinfo/anal...graybirda.html

[Giorgius]

UP! (Y)

Sono uscite le prime varianti "D" non ufficiali del Virus...
Per ora non arrecano nessun danno per quelli che hanno installato in precedenza la Patch Microsoft

Il livello di guardia per queste 2 Varianti è sceso a "3"

[Giorgius]

E' stata appena rilasciata la nuova Release Stinger v1.8.3

Download:
Mirror: http://download.nai.com/products/mca...rt/stinger.exe

Rileva:
This version of Stinger includes detection for all known variants, as of August 18, 2003:

BackDoor-AQJ Bat/Mumu.worm Exploit-DcomRpc
IPCScan IRC/Flood.ap IRC/Flood.bi
IRC/Flood.cd NTServiceLoader PWS-Sincom
W32/Bugbear@MM W32/Deborm.worm.gen W32/Elkern.cav
W32/Fizzer.gen@MM W32/FunLove W32/Klez
W32/Lirva W32/Lovgate W32/Lovsan.worm
W32/Mimail@MM W32/MoFei.worm W32/Mumu.b.worm
W32/Nachi.worm W32/Nimda W32/Sdbot.worm.gen
W32/SirCam@MM W32/Sobig W32/SQLSlammer.worm
W32/Yaha@MM

(Y)

[Giorgius]

ZDNet UK
August 18, 2003, 14:00 BST



Following last week's MSBlast worm attack, security experts at Microsoft and other firms are worried that a recently discovered vulnerability in DirectX could cause even more problems
http://news.zdnet.co.uk/0,39020330,39115773,00.htm

C'è un'altro pericolo "Blaster" x chi non ha aggiornato le Directx9.0/9.0a alla versione Directx9.0b
http://www.microsoft.com/technet/tre...n/ms03-030.asp

Le varianti del suddetto Virus potrebbero sfruttare il "buco" nella sicurezza scoperto il mese scorso nelle Directx9.0/9.0a

Aggiornate le vostre librerie DIRECTX. (Y)

Sistemi Operativi MS in pericolo:
Tutti, tranne Windows NT

[Giorgius]

E' stata rilasciata la nuova Release Stinger v1.8.4

Download:
Mirror: http://download.nai.com/products/mca...rt/stinger.exe

Rileva:
This version of Stinger includes detection for all known variants, as of August 19, 2003:
BackDoor-AQJ Bat/Mumu.worm Exploit-DcomRpc
IPCScan IRC/Flood.ap IRC/Flood.bi
IRC/Flood.cd NTServiceLoader PWS-Sincom
W32/Bugbear@MM W32/Deborm.worm.gen W32/Dumaru@MM
W32/Elkern.cav W32/Fizzer.gen@MM W32/FunLove
W32/Klez W32/Lirva W32/Lovgate
W32/Lovsan.worm W32/Mimail@MM W32/MoFei.worm
W32/Mumu.b.worm W32/Nachi.worm W32/Nimda
W32/Sdbot.worm.gen W32/SirCam@MM W32/Sobig
W32/SQLSlammer.worm W32/Yaha@MM

(Y)