"Dasher" Worm Brings Christmas Keylogger

Posted by CowboyNeal on Saturday December 17, 2005 @04:40AM from the sneaking-in-through-the-chimney dept.

An anonymous reader writes "A worm called 'Dasher' is exploiting a flaw in Windows that Microsoft issued a patch for in October, dropping keyloggers on infected machines, according to F-Secure. The SANS Internet Storm Center warned earlier this week about the weird traffic generated by the first version of this worm, which apparently was crippled by programming errors. Washingtonpost.com has some information that indicates the worm appears to have originated in China. It appears from the Microsoft advisory that Dasher is a threat mainly to Windows 2000 users, although it could impact Windows Server 2003 and Windows XP users who aren't running SP2." Update: 12/17 17:20 GMT by Z : Fixed link to SANS center.

1 of 114 comments (clear)

Min score:

Reason:

Sort:

Re:It could always be worse... by ZakuSage · 2005-12-17 05:40 · Score: 0, Flamebait

I happen to run Windows 2000 on a seperate partition, mainly for when I absolutely need windows applications.

zaku@sage # fdisk /dev/hdb

The number of cylinders for this disk is set to 6232.
There is nothing wrong with that, but this is larger than 1024,
and could in certain setups cause problems with:
1) software that runs at boot time (e.g., old versions of LILO)
2) booting and partitioning software from other OSs
(e.g., DOS FDISK, OS/2 FDISK)

Command (m for help):
Command (m for help): d hdb2
Partition number (1-4): 2

Problem solved. :)