Re: 32.welchia and symantec problems

From: Trafton (traftonofjj2SPAM_at_yahoo.com)
Date: 04/27/04 

Date: Mon, 26 Apr 2004 15:51:13 -0700

Hi Steveman,

W32/Welchia infection is NOT a good way to patch. The worm can crash
networks and introduce problems. Several cases of incorrect patching have
been reported. It is much better to download it from the WindowsUpdate site.

Sincerely,
Benjamin "Trafton" Johnstone-Anderson
Microsoft MVP - Windows Security
Remove "SPAM" from email address to reply!
Security Manifest: www.msmvps.com/trafton/

"STeveman" <anonymous@discussions.microsoft.com> wrote in message
news:4591658C-1EA9-49B3-BBED-C7A90DFC2A34@microsoft.com...
> http://www.microsoft.com/downloads/details.aspx?FamilyID=c8b8a846-f541-4c15-8c9f-220354449117&displaylang=en
>
> Is the microsoft patch, that patchs the DCOM and RPC, the welcha worm uses
> technet to download updates that protect it's self from other worms,
> after patch is install the welcha worm really does you a favor.

Relevant Pages

  • RE: disinfection tool
    ... > Perhaps a very controversial viewpoint is using the backdoor installed by the ... > copycat code red worm to patch these systems. ... > This list is provided by the SecurityFocus ARIS analyzer service. ...
    (Incidents)
  • Re: Will patch fix an already affected computer
    ... The patch will fix the vulnerability, but won't remove the worm. ... Windows XP, Windows 2000, Windows Server 2003, Windows NT ...
    (microsoft.public.security)
  • Re: rpc errors
    ... Nice advice, but note that if you have the worm, installing the patch isn't ... Windows XP, Windows 2000, Windows Server 2003, Windows NT ... Anti-Virus vendor to detect new viruses and their variants. ...
    (microsoft.public.win2000.security)
  • Re: ICF
    ... No I have not being able to run the patch for the Blaster ... >Disinfecting from the Blaster worm also requires that you ... >without the firewall, ...
    (microsoft.public.security.virus)
  • Re: RPC security error is restarting my comp
    ... Yesterday while having looked at the microsoft support ... Is the original problem actually the worm which I have ... >install the patch mentioned above. ... >It is suggested that you first download the patch to your ...
    (microsoft.public.windowsxp.security_admin)