virus
virus

Anti-Blaster worm spreads - and patches

New worm destroys Blaster but could create problems of its own

Iain Thomson

A new worm is spreading across the world and trying to patch the vulnerability that allowed the Blaster worm to spread last week.

The worm, known as Nachi or Welchi, spreads using the same vulnerability in Microsoft operating systems that Blaster exploited.

Advertisement

It also seeks to infect Microsoft Internet Information Server 5.0 using a WebDAV vulnerability found in March 2003.

After infecting a machine the worm seeks out and destroys any copies of the Blaster worm.

It then downloads and installs the Microsoft patch for the vulnerability, and automatically deletes itself on 1 January 2004.

But antivirus companies have warned that the code is not perfect and may cause problems of its own.

"We seem to have an antivirus-virus here", said Mikko Hypponen, director of antivirus research at F-Secure.

"We've seen similar things before, but not to the extent of actually applying Microsoft's own patches to the system."

The virus is thought to have originated in the Far East and was first detected last night. It seems to be spreading slowly due to the amount of patching that has gone on in the last few weeks.

"[Nachi] infections are there but nothing like last Monday," said Jack Clark, product-marketing manager for McAfee.

"I'd still be very concerned if I got it; I wouldn't trust a virus author to fix my PC.

"There may be compatibility problems that crash your system. These virus writers aren't known for their altruism or technical skill."

Users can get rid of the worm by resetting their clock to 2004 and rebooting, which will cause the virus to self-destruct.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Bugwatch: How to stop a bullet

Some promising alternatives to signature-based antivirus software

Virus

Viruses 'a blessing in disguise'

Tell that to the IT managers ...

Blaster and SoBig change the landscape

Security spending set to soar following unprecendented success of next-generation worms

Blaster infects 30,000 PCs per hour

Antivirus experts warn users to keep updating their security solutions

Related whitepapers

Related jobs

Most watched

HTC Hero

Hands on with the HTC Hero

V3.co.uk gets a walk through of the Hero, which includes HTC's new Sense overlay for Android

Xperia X1

Video Review: Sony Ericsson Xperia X1

First Looks Editor Ian Williams gets hands on with the Sony Ericsson Xperia X1

IT white papers

Search white papers

Top categories

Poll

Poll: Summer smartphones

Poll: Summer smartphones

Which smartphone will you be taking to the beach this summer?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

HTC Hero

Hands on with the HTC Hero

V3.co.uk gets a walk through of the Hero, which includes...

NetGear ReadyNAS NVX

Review: NetGear ReadyNAS NVX

NetGear's four-bay compact network-attached storage gets a serious speed boost

AMD

AMD adds to six-core Opteron line up

New HE processors promise even lower power consumption

Adobe Systems

Adobe launches ColdFusion 9 and ColdFusion Builder

Firm promises enhanced developer productivity

Primary Navigation