-- Sandip Bhattacharya wrote:

> I have been having difficulty
> monitoring my connectivity for the past few
> days(which I do using simple ICMP pings),
>  and contacted my Hotwire distributor about it. He
> informed me that due to
> the recent spate of viruses all over net, the
> Hotwire folks have placed
> a firewall before all their customers which (I hope
> among other things)
> blocks all incoming and outgoing ICMP pings!!!


Hi Sandip !!!
the virus that infected the servers of hotwire was
W32.Welchia.Worm It does the following:

* Attempts to download the DCOM RPC patch from
Microsoft's Windows Update Web site, install it, and
then reboot the computer. 
* Checks for active machines to infect by sending an
ICMP echo request, or PING, which will result in
increased ICMP traffic. 
* Attempts to remove W32.Blaster.Worm.

since each infected machine will send an automatic
ping request, the traffic increase will be phenomenal.
hence those ppl at hotwire (or wotever isp) had shut
down the ping request. i to had the same problem.
for further info .....

http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html


regards
pd

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com

_______________________________________________
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd

Reply via email to