1. Home
  2. 🔒 Lockmithing and Lockpicking Discussions
  3. reguarding worm / Auto-reply from abuse@ntlworld.com

reguarding worm / Auto-reply from abuse@ntlworld.com

Recieved this mail below back from snipped-for-privacy@ntlworld.com
RE: Apply the internet patch for Microsoft Internet Explorer
/ Stop Spam Request
============
19 Sept 2003: Msblaster/Welchia Worm ongoing issues
We are aware of the large number of customers who have been
infected by this worm and/or its variants, as a result
customers may be seeing a high number of ICMP requests on
their firewalls. Ntl have mailed all their customers with
instructions on how to remove this worm and patch their PCs.
We are also using a 'honeypot' to identify infected
customers and force them through a patching process. To date
we have succesfully forced 23,000 + customers through this
process.
=======================
fix for
Welchia Worm
formatting link

Msblaster Worm
formatting link
1.0.6.1 of the W32.Blaster.Worm Removal Tool will
remove the following threats as well as their side effects:
W32.Blaster.Worm
W32.Blaster.B.Worm
W32.Blaster.C.Worm
W32.Blaster.D.Worm
W32.Blaster.E.Worm
W32.Blaster.F.Worm
g-day
Reply to
"Key
Loading thread data ...
ISP's have every right to do this. Do you have any idea the resources that are wasted because users don't take even the most basic steps to harden their machines against these kind of attacks? It doesn't just hurt those users it hurts potentially everyone who needs access to the resources of the internet. There is NO excuse for not patching known vulnerabilities especially those known to be exploited by mass mailing or Denial of service worms. It's also worth noting that most anti-virus and firewall programs offer protection in a timely manner from these threats so there is definitely NO reason to allow a mass mailing worm the chance to utilize your machine.
Reply to
Putyourspamhere
While I can understand the desire to force people to do the Right Thing(tm), no ISP that I know of (other than AOL and MSN) has a clause in their service agreement that gives them the right to change software on the user's PC without their knowledge and consent. Even they don't (to my knowledge) push OS fixes to their clients because blindly installing patches tends to break other software.
Having said that, would a few of you kind souls reply to this message (email) today (tuesday) or tomorrow? I'm getting up to 400 virus messages a day, so I'm changing my posting address to dbs_ snipped-for-privacy@tanj.com. I'm adding a filter to throw away mail to that address unless it has some indication that it is replying to a usenet article. To do that I need to look at examples from various news reader software.
I'll reply to all that I get.
Thanks
Daniel
Reply to
dbs__usenet
is "forcing" patches
the resources that are
steps to harden their
the Right
has a clause in
change software on
they don't (to
blindly installing
this message
400 virus messages
dbs_ snipped-for-privacy@tanj.com.
unless it has
To do that I
software.
Daniel, changing your posting address will not stop the virus mails your now getting in your personal mail. it will help the future though. you need to change your personal mail address to stop it.
g'luck
Reply to
"Key
Thanks for the advice. The worms use NNTP servers which typically store only a few weeks of posts. Google has a LONG history but uses a web interface, so the worm's not getting addresses from there.
I figure in about 3 weeks I will only see the virus hitting the new address. Yes, I expect to see this go on forever. I see 'code red' worms hitting my web servers every day, and a fix for that has been out for most of a year.
My virus checker (mcafee) intercepts the virus at my mail gateway and I don't use microsoft except for one 'game' system, so I'm not woried about the virus itself.
I'm worried about the next one that has a larger payload or that sends thousands of nuisance emails with random text to addresses found on usenet. It's hard to filter out the random text if it does not include a copy of the virus. In the old days we called it a mail bomb...
Hows that for off topic :-)
Daniel
Reply to
dbs__usenet
Maybe I misread the original but it seems to me that users were being forced to select the install so that they did have knowledge of it, albeit perhaps not the desire to install it. Your other point is a good one. The point of the ISP's in question I'm sure is that unpatched machines host attacks which cause them a great deal of trouble. If all computers on the net were up to date patchwise and had proper firewall and anti-virus softwware the effectiveness of attacks like those that have recently made news would be a tiny fraction of what it is now. Of course the same would be true if the software was not flawed in the first place.
Sent via e-mail at your request.
Reply to
Putyourspamhere

Site Timeline

Related

  • Re: money / X-Complaints-To: abuse@ntlworld.com

  • "me" snipped-for-privacy@ntlworld.com wrote in message ---snip--- ...

  • Re: First Randomizer / X-Complaints-To: abuse@ntlworld.com

  • "Michael" snipped-for-privacy@hotmail.com wrote OT spam in message ---snip...

  • Re: MAKE LOADS OF MONEY FOR FREE / X-Complaints-To: abuse@ntlworld.com

  • X-Complaints-To: see "Snip". of us never see the regard to it. No big to see it...

  • Worm gear?

  • Does anyone know where to buy a worm gear and wheel - come to think of it, does...

  • Worm Gear

  • Does anyone have a suggestion as to where I can get a worm gear for a MDC...

  • worm gears

  • Hello, could anyone point me to a source for small worm gears andwheels in...

  • Auto-darkening helmet

  • I picked up a cheap helmet at Princess Auto.Never having had a auto-darkening,I...

  • worm tooth form

  • Does anyone know what a "PT-1 tooth form" on a worm (and worm gear) is? Ifso,...

  • Re: It's simple... / report abuse to abuse@blueyonder.co.uk

  • "Lariean Poringa" snipped-for-privacy@Dev.Null wrote off-topic spam in...

  • Replacing Hornby worm

  • Does anyone know how to get a nylon worm off a Hornby 0-4-0 so that I can...

  • Minimum ratio for self-locking worm & wheel?

  • Got a minor bit of stuff to machine up, basically a small winch. Ican't find...

  • Worm Gear Size?

  • I need help in find a brass worm gear for an upright bass fiddle. The gear is...

  • Worm gear material

  • Try..http://www.anchorbronze.com/crossdata.htmall I could google...

  • Worm gear material

  • Try..http://www.anchorbronze.com/crossdata.htmall I could google...

  • mini-lathe worm cutting

  • I call on your collective wisdom.In process of making a worm, for Dave...

  • Noisy glow worm 35SXi

  • Recently had a glow-worm 35SXi fitted in the back of the garage and it sometimes...

  • worm gear cutting success

  • Greetings Ken,First of all lets get the definitions right. Worm wheel and worm...

  • Re: Awesome! / abuse@netvisao.pt

  • Key: You would get much more attention from an abuse complaint than any...

PolyTech Forum website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.