Novell 5 and welchia.b.worm

  • Thread starter Thread starter sfeder2
  • Start date Start date
S

sfeder2

A virus has been opening connections to a customers firewall to th
point where new connections are dropped and the internet i
unavailable. I found 5 different viruses at the site and th
workstations were, in terms of antivirus, a mess. I have gotte
through most of the workstations and brought them up to speed, howeve
their is still a virus source. I will be going back to work on th
servers and patching the remaining clients.
Does anyone know if the welchia worm can actually operate from a Novel
5 server running tcp/ip? My instinct tells me it could infect files o
the server but I don't believe it could actually infect the server, bu
I don't know enough about the virus code to be sure. Thanks In Advanc
(TIA

sfeder
 
A virus has been opening connections to a customers firewall to the
point where new connections are dropped and the internet is
unavailable. I found 5 different viruses at the site and the
workstations were, in terms of antivirus, a mess. I have gotten
through most of the workstations and brought them up to speed, however
their is still a virus source. I will be going back to work on the
servers and patching the remaining clients.
Does anyone know if the welchia worm can actually operate from a Novell
5 server running tcp/ip? My instinct tells me it could infect files on
the server but I don't believe it could actually infect the server, but
I don't know enough about the virus code to be sure. Thanks In Advance
(TIA)


sfeder2
----------------------------------------------------------------------- -
-
View this thread: http://www.mcse.ms/message414051.html
Click to expand...

Novell Netware is a different O/S design than the MS O/S and the worm is
targeted to exploited the NT based O/S(s) with DCOM active (the default)
on the O/S. The Novell O/S doesn't have the DCOM and COM or COM+ design
so it cannot be exploited in that manner. However, a file can be on the
Novell file server that is infected and the worm could take off by a NT
based machine accessing the file.

Duane :)
 
Back
Top