Matridom
October 1st, 2003, 07:25 PM
There apears to be a new worm emerging that no detector has of yet been able to detect. one of the symptoms is the settings of a static DNS server. The IP's that they are being set to are as follows.
69.57.146.14
69.57.147.175
also this key seems to enter
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControSet\Service s\Tcpip\Parameters\interfaces\windows]
"r0x"="your s0x"
Changing back to a dynamic DNS seems to reset everything... at this time. I'll keep ya's posted.
This apears to be only affecting 2k XP systems.
Edit : Found some information on another forum. read here
http://vil.nai.com/vil/content/v_100719.htm
69.57.146.14
69.57.147.175
also this key seems to enter
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControSet\Service s\Tcpip\Parameters\interfaces\windows]
"r0x"="your s0x"
Changing back to a dynamic DNS seems to reset everything... at this time. I'll keep ya's posted.
This apears to be only affecting 2k XP systems.
Edit : Found some information on another forum. read here
http://vil.nai.com/vil/content/v_100719.htm