About
Subscribe

US PCs shut down by worms

Tracy Burrows
By Tracy Burrows, ITWeb contributor.
Johannesburg, 17 Aug 2005

Several worms that exploit flaws in Microsoft Windows 2000 are reported to be shutting down PCs across the US. However, local users do not appear to have been affected.

The worms, including Zotob, IRCBOT.WORM and RBOT.CBQ, appear to exploit the same plug-and-play vulnerability in Microsoft Windows 2000, which is believed to be running on just under half the world`s computers.

Scores of companies in the US, including major media groups such as CNN, New York Times and ABC News, have been affected. In many cases, worms are causing PCs to restart repeatedly.

Microsoft warned users last week of three newly found "critical" flaws in its , and urged users to update their software.

Anti-virus firm McAfee says in an that one of the worms, IRCBOT.WORM, appeared seven days from the initial announcement of the Microsoft vulnerability on 9 August.

This, says McAfee, "demonstrates the fastest time between the announcement of a vulnerability and the success of a mass propagating exploit - even faster than Sasser, which took 14 days".

"While there is indeed a lot of activity in this regard abroad, our support department in SA has not had any reports of infections to date, but we are monitoring the situation closely," says Brett Myroff, CEO of local Sophos distributor Netxactics.

Myroff notes that attacks of this type are becoming increasingly commonplace. "It`s time to wake up and smell the roses," he warns. "IT administrators need to patch their systems now against these security holes or not be surprised when hackers and worms blast their way through.

"Computer viruses don`t discriminate - they will attempt to hit anyone with an unprotected computer, be they a home user or a multinational corporation.

"However, there is no need for panic or hysteria, ensuring all PCs update their anti-virus software automatically, that they have a strong firewall in place, and that they have installed the latest Microsoft security patches, should help limit the effects and damage that these types of attacks can cause."

Share