Computer / Server worm

LadyEagle · Jan 25, 2003

Posted by pudge on Saturday January 25, @07:43AM
from the no-man-will-know-the-day-or-the-hour dept.

defile writes "Since about midnight EST almost every host on the internet has been receiving a 376 byte UDP payload on port ms-sql-m (1434) from a random infected server. Reports of some hosts receiving 10 per minute or more. internetpulse.net is reporting UUNet and Internap are being hit very hard. This is the cause of major connectivity problems being experienced worldwide. It is believed this worm leverages a vulnerability published in June 2002. Several core routers have taken to blocking port 1434 outright. If you run Microsoft SQL Server, make sure the public internet can't access it. If you manage a gateway, consider dropping UDP packets sent to port 1434." bani adds "This has effectively disabled 5 of the 13 root nameservers."
Click to expand...

http://slashdot.org/articles/03/01/25/1245206.shtml?tid=109

Sherrie · Jan 25, 2003

Actually Friday night the College shut my sons internet usage out because they found out he had a virus.

He has Norton and AVG 6, and neither of them pick it up.

So he has spent the weekend redoing the computer, and re-installing.

Sherrie

Computer / Server worm

LadyEagle <b>Moderator</b> <img src =/israel.gif>

Sherrie New Member

Useful Searches

Computer / Server worm

LadyEagle <b>Moderator</b> <img src =/israel.gif>

Sherrie New Member