Encyclopedia

Panda Internet Security 2010

Panda Internet Security 2010

Full protectión for complete peace of mind on the Internet.

Blaster.B

 
Threat LevelModerate threatDamageHighDistributionNot widespread
Common name:Blaster.B
Technical name:W32/Blaster.B
Threat level:Low
Type:Worm
Effects:  It launches denial of service attacks against the windowsupdate.com website. It restarts the affected computer.

Affected platforms:

Windows XP/2000/NT

First detected on:Aug. 14, 2003
Detection updated on:March 15, 2005
StatisticsNo
Yes, using TruPrevent Technologies

Brief Description 

    

Blaster.B is a worm that infects only Windows 2003/XP/2000/NT computers. Blaster.B exploits the Buffer Overrun in RPC Interface vulnerability to spread to as many computers as possible.

Blaster.B launches denial of service (DoS) attacks against the windowsupdate.com website. Whenever the system date is between the days 15 and 31 of every month, or every day during the months September through December of every year, 2003, Blaster.B sends a 40 byte packet every 20 milliseconds, using the TCP port 80.

Blaster.B spreads by attacking IP addresses generated at random and exploits the vulnerability mentioned above to download a copy of itself to the compromised computer. In order to do this, Blaster.B incorporates its own TFTP (Trivial File Transfer Protocol) server.

If you have a Windows 2003/XP/2000/NT computer, it is highly recommendable to download the security patch from the Microsoft website. Click here to access the web page for downloading the patch.

Visible Symptoms 

    

Some clear indications that Blaster.B has reached the computer are the following:

  • The network traffic increases on the TCP 135 and 4444 and UDP 69 ports.
  • The attacked computer blocks and restarts, due to programming errors in the code of the worm.

Last updated:  15/03/2005 

Thanks to Collective Intelligence, Panda's exclusive cloud-computing technology, the company's 2010 solutions leverage the knowledge gathered from the community of millions of Panda users around the world. Each new file received is automatically classified within six minutes and the Collective Intelligence servers classify more than 50,000 new malware samples every day. These technologies correlate information on malware received from each computer to continuously improve the protection level for the worldwide community of users. Panda's 2010 solutions have continuous, real-time contact with this vast knowledge base allowing the company to offer users the fastest response against the new malware that appears every day.

Virus News

Help your friends against viruses: share, save and subscribe to our security content. Thank you.

Share/Bookmark

Final episode of ‘Lost’ used by hackers to spread the MySecurityEngine fake anti...

Panda Security to participate in Brazil’s CeCOS IV conference

PandaLabs’ Quarterly Report: 61% of new threats created in Q1 were Trojans

[+ News ]