Lovsan.A virus spotted by Central Command

Internet Business News, August 13, 2003

INTERNET BUSINESS NEWS-(C)1995-2003 M2 COMMUNICATIONS LTD

Antivirus software provider Central Command has issued a warning about a new computer virus that has been spotted replicating in the wild.

The Worm/Lovsan.A virus attempts to exploit the RPC Buffer Overrun vulnerability in unpatched Microsoft Windows NT, 2000, XP and Windows server 2003 operating systems. If it is successful the virus will download and run a file called msblast.exe using the Trivial File Transfer Protocol.

Lovsan.A spreads by scanning a range of IP addresses on TCP port 135 for other vulnerable systems and copies itself to PCs that are not patched. Infected systems may become unstable, according to Central Command, and will launch a distributed denial of service attack on http://www.windowsupdate.com on selected days.

((Comments on this story may be sent to info@m2.com))