News Security Experts Decry 'Good' Worm

From eWeek:

Security experts are now tracking a new variant of the Blaster worm, only this one attempts to patch vulnerable systems.
Known as Blaster.D, the worm acts much like the original Blaster in that it infects machines that haven't yet been patched against the RPC DCOM vulnerability in Microsoft Corp.'s Windows 2000 and XP software. But, once it infects a PC, the new variant attempts to force the machine to download and install the patch for the flaw that Blaster exploits. The worm will remove itself from infected machines in 2004.

Despite its seemingly good intentions, Blaster.D, also known as Welchia or Nachi, can still cause just as many network problems as its predecessors do. It still scans for other vulnerable systems, and therefore eats up valuable bandwidth.

More here

 

Great more load on the network... and more hastle for me... So far to day I've patched/cleaned 72 infected machines (out of the ~700 machines here)

Still I suppose the intent was right...

 

some people just have too much time on their hands, they could so easely go work for microsoft and still be as hated