RE: Blaster Variant - W32.Blaster.B.Worm

It would seem that there is a third according to Symantec

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.c.wo rm.html

Which drops in a little backdoor component has anyone seen this one out there yet?

Bruce Martins
Systems Administrator
EXTEND>>MEDIA
190 Liberty Street
Toronto, Ontario
Canada
M6K 3L5

e:bmartins@extend.com
t: (416) 535-4222 ext. 2307
f: (416) 535-1201

-----Original Message-----
From: Brad Pryce [mailto:bpryce@sasktel.net] Sent: Wednesday, August 13, 2003 9:29 PM To: Trent Dilkie
Cc: incidents@securityfocus.com

So, is that three different versions of the worm? The original, the one found by Kaspersky named teekids.exe, and this one?

Trent Dilkie wrote:

>Symantec has discovered a variant of Blaster, details at:

---
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
----------------------------------------------------------------------------

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek