Windowsupdate.com DDOS

by phil on Tuesday Aug 12, 2003 5:12 PM

Windowsupdate.com has been terribly down and slow today, I think because of W32.Blaster.Worm. I noticed my laptop kept getting it's RPC service shut-down and subsequently, would require that the laptop be rebooted... apparently Stanford was tryign to shut-down the RPC process that was being used on infected machines to infect each other. The other odd thing that clue me off to the idea that I had a virus was that I couldn't go to windowsupdate.com to get an update. Apparently the msblast worm DDOS's windowsupdate.com so it a) impedes your ability to go there and b) prevents other people from going there. See right now, I can't go to windowsupdate.com... it's so slow.

How to fix it, well one way is to go to that link above by Symantec, or just do a search for msblast.exe on your harddrive and delete it. Also, block port 135... best bet, check Symantec's site.