Author |
Topic: Virus Alert for BlackICE and RealSecure users (Read 298 times) |
|
Opus
New Board Hall of Famer
(Insert witty comment here)
  
 
Gender: 
Posts: 2509
|
 |
Virus Alert for BlackICE and RealSecure users
« on: Mar 20th, 2004, 10:18pm » |
 Quote  Modify
|
A quickly spreading Internet worm destroyed or damaged tens of thousands of personal computers worldwide Saturday morning by exploiting a security flaw in a firewall program designed to protect PCs from online threats, computer experts said.
The "Witty" worm writes random data onto the hard drives of computers equipped with the Black Ice and Real Secure Internet firewall products, causing the drives to fail and making it impossible to restart the PCs. Unlike many recent worms that arrive as e-mail attachments, it spreads automatically to vulnerable computers without any action on the part of the user.
At least 50,000 computers have been infected so far, according to Reston, Va.-based computer security firm iDefense and the Bethesda, Md.-based SANS Institute.
If you use these firewalls on Windows.
BlackICE™ Agent for Server 3.6 ebz, ecd, ece, ecf
BlackICE PC Protection 3.6 cbz, ccd, ccf
BlackICE Server Protection 3.6 cbz, ccd, ccf
RealSecure® Network 7.0, XPU 22.4 and 22.10
RealSecure Server Sensor 7.0 XPU 22.4 and 22.10
RealSecure Desktop 7.0 ebf, ebj, ebk, ebl
RealSecure Desktop 3.6 ebz, ecd, ece, ecf
RealSecure Guard 3.6 ebz, ecd, ece, ecf
RealSecure Sentry 3.6 ebz, ecd, ece, ecf
Power down, go to a safe computer and go HERE
Opus/Paul
|
|
 IP Logged |
Zed-Zed-nine plural-Zed alpha,
There is no place like home.
|
|
|
Kirk
CH.com Alumnus
New Board Hall of Famer
VINIMUS, VIDIMUS, DOLAVIMUS
  
Gender:
Posts: 1914
|
 |
Re: Virus Alert for BlackICE and RealSecure users
« Reply #1 on: Mar 21st, 2004, 5:49am » |
Quote Modify
|
A firewall worm that makes your machine unbootable. The script kiddies are trying to get creative.
Be careful out there. We're pulling for ya.
BUMP
TTFN
|
|
IP Logged |
|
|
|
Opus
New Board Hall of Famer
(Insert witty comment here)
Gender:
Posts: 2509
|
|
Re: Virus Alert for BlackICE and RealSecure users
« Reply #2 on: Mar 21st, 2004, 6:38pm » |
Quote Modify
|
Kirk,
It doesn't seem like script kiddie work, this thing changes the packet size that it sends out to fool virus defs, I almost wonder if it is a proof of concept that got away from someone, if it was put up on a virus board wouldn't the "insert witty comment" have been changed to one. Anyway scary stuff, think I'll go patch my kernel now.
Opus/Paul
|
|
IP Logged |
Zed-Zed-nine plural-Zed alpha,
There is no place like home.
|
|
|
|
|
|
Home
Help
Search
Members
Member Map
Login
Register
Reply
Notify of replies
Send Topic
Print
test rss