The worm uses infected copies of remote-access app VNC and Internet-communications app IRC
Published:
14 March 2003 y., Friday
The latest Internet worm infects Windows NT/2000/XP Professional machines with two Trojan horses and leaves infected systems open for use in future distributed denial-of-service (DDoS) attacks. Unlike previous worms, Deloder (w32.deloder.a) does not spread using e-mail; rather, it scans the Internet looking for open 445 TCP/IP ports.
Deloder carries an infected version of a commonly available network remote administration tool, Virtual Network Computing (VNC), and an Internet Relay Chat (IRC) bot. VNC can be used for legitimate remote access purposes, but used within the context of this worm, it is considered to be a Trojan horse. Because Deloder spreads via shared network connections and could cause future damage to files and systems alike, this worm rates a 6 on the CNET Virus Meter.
Deloder scans the Internet, searching for computers with an open Windows port 445, which corresponds to Microsoft Service Message Block (SMB) over TCP/IP. This port allows the sharing of Windows files, usually protected with passwords. Deloder tries a number of different weak passwords such as password or computer in order to gain access to computers on a network. Corporate systems with strong file-sharing passwords and those behind firewalls should be protected. However, many home systems with default or weak passwords and no firewall may be vulnerable to unauthorized remote access, courtesy of this worm.
Šaltinis:
cnet.com
Copying, publishing, announcing any information from the News.lt portal without written permission of News.lt editorial office is prohibited.
The most popular articles
Software company announced new structure_ of it_s business.
more »
Wincor Nixdorf AG has opened a global distribution center in Singapore to support its growing operations in Asia Pacific.
more »
Over 3 million people in Europe bet online on sports like football, cricket and horse racing.
more »
Executives from Wincor Nixdorf Inc. (USA) hosted a bankers' forum last month, highlighting emerging trends in a challenging U.S. economic environment.
more »
The appeal for a reverse ATM code has again popped up in mainstream press, this time in Illinois, where the (Peoria, Ill.) Journal Star last week reported about a technology that has been discussed in the industry for several years, yet fails to take off.
more »
At the CeBIT fair grounds in Hanover, Germany, you move into a different realm. One with robots - lots of bots.
more »
During the 10th annual ATM Industry Association conference last month, ATMIA and ATM Marketplace recognized four leading ATM players for their individual or combined contributions to the ATM Industry.
more »
The show held annually in the northern German city of Hannover usually invites a foreign nation to become an official partner, but in a historic move that distinction was granted to the State of California this year.
more »
After a six-month research project that involved the surveying of some 1,600 ATM and financial executives from throughout the world, ATM Marketplace and the ATM Industry Association have announced plans to release the findings of their research next month.
more »
Technology Credit Union has teamed with LocatorSearch to introduce a global positioning system (GPS) download to help members find surcharge-free ATMs.
more »
It's easy to demonise violent video games, but a report making its way through parliament says that "video games can have beneficial effects upon young people."
more »