BitDefender Antivirus
Go

Press Center

New Msblast virus possible from Windows vulnerability

Tuesday, September 16, 2003




The source code for the second RPC critical flaw has been published on the web

BitDefender, an award-winning provider of security software and services, announce today that the source code for the second RPC critical flaw - the first one being responsible for Msblast virus creation - has been published on the web. The compiled version of the code is detected by BitDefender Antivirus products as Exploit.DCOM-RPC.A.

The history repeats itself, as the second version of the exploit was now published on the same Chinese website as the first one. BitDefender researchers reiterate that the source code of the first RPC critical flaw was used by virus writers to build the first version of Msblast - the most spread Internet worm of all times.

"We assess that the time until a new speculation of this new critical flaw will be spreading is not far", Mihai Neagu, Virus Researcher at BitDefender Lab estimates. "As far as we can see, there is a trend in computer virus writing, to take advantage of the new but verified flaws in most used software in order to wreak havoc in a large mass of computers", Mihai concluded.

In the particular circumstances entailed by the last Msblast outbreak, BitDefender experts have developed a specific feature in their antivirus scanning engines, to detect any attempt to use the Microsoft Windows DCOM-RPC vulnerability for system intrusion, successfully identifying any possible virus replication. Therefore, a virus created by using any of the two RPC flaws will be detected and reported promptly by the BitDefender Antivirus products.

All Windows users are urged to patch their systems from the following addresses, depending on their operating system:

Windows 2000:
ftp://eresources.mcg.edu/pub/Download/MS03-039/Windows%202000/Windows2000-KB824146-x86-ENU.exe
Windows XP:
ftp://eresources.mcg.edu/pub/Download/MS03-039/Windows%20XP/WindowsXP-KB824146-x86-ENU.exe
Windows NT 4 Workstation:
ftp://eresources.mcg.edu/pub/Download/MS03-039/Windows%20NT%20Workstation%204.0/WindowsNT4Workstation-KB824146-x86-ENU.EXE
Windows NT 4 Server:
ftp://eresources.mcg.edu/pub/Download/MS03-039/Windows%20NT%20Server%204.0/WindowsNT4Server-KB824146-x86-ENU.EXE
Windows 2003 Server:
http://www.microsoft.com/downloads/details.aspx?FamilyId=51184D09-4F7E-4F7B-87A4-C208E9BA4787&displaylang=en

For a permanent protection, BitDefender Antivirus commercial solutions are available for sale on the Internet or at local distributors and start from USD 29.95.


Digg this story    del.ici.us

* * *

About BitDefender®
BitDefender is the creator of one of the industry's fastest and most effective lines of internationally certified security software. Since its inception in 2001, BitDefender has continued to raise the bar and set new standards in proactive threat prevention. Every day, BitDefender protects tens of millions of home and corporate users across the globe - giving them the peace of mind of knowing that their digital experiences will be secure. BitDefender solutions are distributed by a global network of value-added distribution and reseller partners in more than 100 countries worldwide. More information about BitDefender and its products are available at the company’s security solutions press room. Additionally, BitDefender’s www.malwarecity.com provides background and the latest updates on security threats helping users stay informed in the everyday battle against malware.



Events Schedule

BitDefender Event Calendar. Browse it to find out when you'll have the opportunity to meet the BitDefender team. All the events listed have been confirmed, but others may be added at any time so check back often for promotions and fairs in your area.

Media
Representatives

Who to ask? This is where you can find a list of all of our media representatives, who are ready to answer any question you might have.

Test Our Products

Put us to the test! We welcome the journalists or reviewers interested in testing any of the BitDefender products.