EQInterface Forums - View Single Post - Nasty Virus on the Loose!

Worm only affects XP, 2k and NT systems due to a security flaw in them. The only thing you have to do to become infected is be connected to the internet. By default, because of the security flaw, port 135 is open on your system. The patch fixes this security bug.

The way the virus spreads is once on an infected system, it runs an algorythm to calculate other IPs on the portion of the internet. It then does a port scan, and finds computers with the same security flaw. It will then insert itself into that computer, were it continues to do it's work. No user intervention is needed to allow this virus to spread. That is what is so scary about it. (and why it was upgraded to class 4). We were lucky it wasn't more damaging.

08-14-2003, 10:03 PM	#20
Turlo Featured Artist Join Date: Aug 2002 Posts: 317	Worm only affects XP, 2k and NT systems due to a security flaw in them. The only thing you have to do to become infected is be connected to the internet. By default, because of the security flaw, port 135 is open on your system. The patch fixes this security bug. The way the virus spreads is once on an infected system, it runs an algorythm to calculate other IPs on the portion of the internet. It then does a port scan, and finds computers with the same security flaw. It will then insert itself into that computer, were it continues to do it's work. No user intervention is needed to allow this virus to spread. That is what is so scary about it. (and why it was upgraded to class 4). We were lucky it wasn't more damaging.