Computer Chess Club Archives


Search

Terms

Messages

Subject: Re: Clarification and WARNING to all Windows users!

Author: David Dahlem

Date: 06:04:07 08/13/03

Go up one level in this thread


On August 12, 2003 at 18:12:40, Omid David Tabibi wrote:

>First of all a clarification, I did not say that my machine got infected when
>playing on playchess.com (read again my message). For the record I am a long
>time user of playchess.com and can say only good words about it.
>
>Now to the warning:
>
>If you have up-to-date anti-virus definitions, and never open an unknown binary
>file (exactly like me), you are still vulnerable (alas, I learned it too late)!
>This was the first time a machine of mine got infected with virus, because this
>is the first known widespread virus which gets into your machine _without_ your
>intervention!
>
>see
>http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html
>
>I don't remember any such grave security problem in the history of Windows...
>
>So, I *strongly* recommend all Windows users to download the latest Windows
>patch from http://www.windowsupdate.com/

At
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MSBLAST.A
I see this description of this virus:

"TrendLabs has received several infection reports of this new worm, which
exploits the RPC DCOM BUFFER OVERFLOW. This vulnerability in a Windows
Distributed Component Object Model (DCOM) Remote Procedure Call (RPC) interface
allows an attacker to gain full access and execute any code on a target machine,
leaving it compromised.  This worm has been observed to continuously scan random
IP addresses and send data to vulnerable systems on the network using port 135.
This worm runs on and is able to propagate into Windows NT, 2000, and XP
systems."

According to this, all windows systems are not vulnerable?

Regards
Dave




This page took 0 seconds to execute

Last modified: Thu, 15 Apr 21 08:11:13 -0700

Current Computer Chess Club Forums at Talkchess. This site by Sean Mintz.