someone in the
microsoft.public.security.virus newsgroup also said they got this and id'd
it as a virus with a new file appearing as msblast.exe. They quarantined
that file and updated all patches. you may need to do more.
One person's suggestion:
"This may be the sign that you have been compromised by a worm that exploits
the RPC hole recently identified in Windows.
You won't like this, but my advice is to unplug the system from the
internet, clean the system and restore from a known good backup, and update
the patches on this and all your other computers, making sure to check them
and do the same roll-back to a known good backup if you detect any hint of
tampering.
Told you that you wouldn't like it, sorry."
--
Thomas O'Grady,
Security Business Unit
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no rights.
