Forum Moderators: phranque

Message Too Old, No Replies

What if that blaster worm is pointed to your domain...

         

irock

7:56 am on Aug 18, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Hi, i read so much about this worm that attacks soley on windowsupdate.com. MS had to abandon that domain to evade the attack. I was wondering if that worm is moving its target to another domain, say webmasterworld.com, does this mean that this site will never be brought back online again?

edit_g

10:15 am on Aug 18, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



If it can bring down an MS site with pure volume of traffic then it could probably bring down any other site on the web as well. But it would be hard for anyone to change the domain it points to because the MS version has propogated so far and people have patched up their computers (hopefully) so a completely new version of the virus wouldn't take such a firm hold.

jimbo_mac

12:12 pm on Sep 6, 2003 (gmt 0)

10+ Year Member



Blaster-F worm update

According to media reports, Dan Dumitru Ciobanu, a graduate of the Technical University in Iasi, was said to have been traced through his online nickname "Enbiei" (used as a filename by the virus) and a section of Romanian language text contained inside the virus. The text, when translated into English, reads as follows:

"Don't go to the Hydrotechnics faculty! You are wasting your time... Birsan, your pension awaits! I urinate on the diploma!

Story here [sophos.com]

irock

4:02 pm on Sep 6, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Don't they have better things to do? ARGGHH

I'm the geek in the people around me. The Blaster.whatever has kept me busy for a whole week when all my friends called me for help! Good thing I use a Mac... small population.. not yet a prime target

Mohamed_E

8:13 pm on Sep 10, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Microsoft has just published an upgrade to the Blaster patch, see Microsoft Security Bulletin MS03-039 [microsoft.com].