Re: [Full-Disclosure] New Windows worm?

[psz@maths.usyd.edu.au (Paul Szabo)]

> ... Simptoms include ...
> -Lots of svchost errors
> ... I've already eliminated the new MSBlast worm. 

A wild guess: you have Win2k SP4 with MS03-026 (and so deemed safe)?
That patch leaves a DoS problem still:

  http://archives.neohapsis.com/archives/ntbugtraq/2003-q3/0070.html
  http://www.securityfocus.com/archive/1/330886

Cheers,

Paul Szabo - psz@maths.usyd.edu.au  http://www.maths.usyd.edu.au:8000/u/psz/
School of Mathematics and Statistics  University of Sydney   2006  Australia
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html