*Alert*

There apears to be a new worm emerging that no detector has of yet been able to detect. one of the symptoms is the settings of a static DNS server. The IP's that they are being set to are as follows.

69.57.146.14
69.57.147.175

also this key seems to enter

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControSet\Service s\Tcpip\Parameters\interfaces\windows]
"r0x"="your s0x"

Changing back to a dynamic DNS seems to reset everything... at this time. I'll keep ya's posted.

This apears to be only affecting 2k XP systems.

Edit : Found some information on another forum. read here

http://vil.nai.com/vil/content/v_100719.htm