virus
virus

Anti-Blaster worm spreads - and patches

New worm destroys Blaster but could create problems of its own

Written by Iain Thomson

A new worm is spreading across the world and trying to patch the vulnerability that allowed the Blaster worm to spread last week.

The worm, known as Nachi or Welchi, spreads using the same vulnerability in Microsoft operating systems that Blaster exploited.

It also seeks to infect Microsoft Internet Information Server 5.0 using a WebDAV vulnerability found in March 2003.

After infecting a machine the worm seeks out and destroys any copies of the Blaster worm.

It then downloads and installs the Microsoft patch for the vulnerability, and automatically deletes itself on 1 January 2004.

But antivirus companies have warned that the code is not perfect and may cause problems of its own.

"We seem to have an antivirus-virus here", said Mikko Hypponen, director of antivirus research at F-Secure.

"We've seen similar things before, but not to the extent of actually applying Microsoft's own patches to the system."

The virus is thought to have originated in the Far East and was first detected last night. It seems to be spreading slowly due to the amount of patching that has gone on in the last few weeks.

"[Nachi] infections are there but nothing like last Monday," said Jack Clark, product-marketing manager for McAfee.

"I'd still be very concerned if I got it; I wouldn't trust a virus author to fix my PC.

"There may be compatibility problems that crash your system. These virus writers aren't known for their altruism or technical skill."

Users can get rid of the worm by resetting their clock to 2004 and rebooting, which will cause the virus to self-destruct.

  • Have your say
  • Send to a friend
  • Print this
  • Share

Tags:

reader comments

related articles

Bugwatch: How to stop a bullet

Some promising alternatives to signature-based antivirus software 10 Jun 2004

 

Viruses 'a blessing in disguise'

Tell that to the IT managers ... 18 Sep 2003

Blaster and SoBig change the landscape

Security spending set to soar following unprecendented success of next-generation worms 03 Sep 2003

Blaster infects 30,000 PCs per hour

Antivirus experts warn users to keep updating their security solutions 18 Aug 2003

Mistake foils Blaster Denial of Service

Worm writer's basic error sends DoS attacks to wrong address 18 Aug 2003

New Blaster worm variants on the loose

Trojan payload for new worm identified by antivirus experts 15 Aug 2003

Security companies issue fresh Conficker warning

Users are advised to remain vigilant despite worm's no-show on 1 April 06 Apr 2009

Fake anti-virus software on the rise

Security companies warn people to be vigilant 09 Apr 2009

Cool down on Conficker panic, say experts

1 April update not likely to be doomsday for malware infection 27 Mar 2009

related whitepapers

today's top stories

Police hunt for moles with security software

Lancashire Constabulary to monitor data input of 7,000 staff in bid to prevent intelligence leaks 09 Feb 2010

PaperlinX outsources IT and comms to Bull and BT

Paper company spends €22m on five-year deal for desktop management, helpdesk and datacentre services 05 Feb 2010

Social tools take KM to a new level

Technology expert David Tebbutt explains how – and why – organisations should integrate social networking tools into their knowledge management strategy 02 Feb 2010

EDS court defeat puts vendors on their guard

BSkyB’s victory in a long-running court case against EDS has serious implications for the IT industry 02 Feb 2010

Law firm monitors web traffic violations

Bucks declining global security appliance sales with unified threat management (UTM) platform deployment 01 Feb 2010

Advertisement

Security: The New Face of Intrusion Prevention
An outline of traditional IPS functionality, modern developments and how IPS can be deployed easily.

UK businesses’ attitudes to Cloud Computing revealed

Features results from a survey of over 200 Computing readers.

Advertisement

Keep up to date with the latest products, services and technologies from the world's leading IT companies; ITHound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

More available - click 'submit' to view

Existing User

Newsletter user login:

Jobs

Related jobs

Job of the week

Job alerts

Sign up here

Find your next job

IT Salary Checker

Check salary here

Advertisement

Latest poll

Internet Explorer 6

Internet Explorer 6

Following recent concerns about the security of Internet Explorer 6 are you planning to phase it out?

View poll results

Latest audio and video articles

Tony McAlisterVideo

Video Q&A: Tony McAlister, CTO, Betfair - Part one

On changing the skills development strategy at the online gambling firm - part one of a two-part video interview 05 Nov 2009

Video

Nokia shows upcoming handset technologies

Mobile phone features of tomorrow take the stage 21 Oct 2009

Latest in-depth articles

Analysis

Police hunt for moles with security software

Lancashire Constabulary to monitor data input of 7,000 staff in bid to prevent intelligence leaks 09 Feb 2010

Businessman with eye patch, dagger and tie round head, sitting at laptopFeatures

Are you sure you're not a pirate?

It is alarmingly easy for an IT leader to unwittingly exceed the scope of a software licence, and the chances of being caught out have never been greater, as technology lawyers Mark Weston and Paul Gershlick explain 09 Feb 2010

Primary Navigation