Sunday, March 21. 2004
Danger! BlackIce worm
If you use BlackIce as your personal firewall, GET OFF THE INTERNET NOW!This is bad enough that the Internet Storm Center has raised it's status to a Yellow Alert.
A worm exploiting the BlackIce ICQ parser is causing major disruptions. It started originating on port 4000/UDP, but has either morphed or is using different source ports due to NAT. Get the latest BlackIce, versions ending with 'g', and update immediately.
If you can't get off the internet, block ALL UDP traffic. This is drastic, and will break DNS, but it is the only way to keep from getting infected if yo uuse BlackIce.
Although this worm doesn't infect your hard drive, it has been reported to cause hard drive corruptions - some people who are infected find that their systems won't come back up after infection.
Info:
Internet Storm Center
F-Secure
.... and Lurhq
Trackbacks
Trackback specific URI for this entry
No Trackbacks