Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Microsoft kills Net address to foil worm [WindowsUpdate.com is dead for good]
CNet News ^ | August 15, 2003

Posted on 08/15/2003 12:47:11 PM PDT by HAL9000

As part of its effort to stop the progress of the MSBlast worm, Microsoft is killing off the Windows Update address that the self-propagating program was set to attack.

Because the worm is programmed to attack only that address and not the site that it redirects to, the software giant has decided to eliminate the Windowsupdate.com address. The move is one of a series of efforts that Microsoft has undertaken to try to thwart an attack on its servers that was expected to be launched by infected computers starting Friday.

"One strategy for cushioning the blow was to extinguish the Windowsupdate.com" site, said Microsoft spokesman Sean Sundwall. "We have no plans to ever restore that to be an active site."

On Thursday, Microsoft changed the Internet addresses that correspond to the Windowsupdate.com entry in the domain name service (DNS) servers that act as the Internet's address book. One source familiar with the change said that the new addresses are no longer on the same network as Microsoft's other servers, thereby insulating the company's servers from any attack aimed at Windowsupdate.com.

Sundwall stressed that the Windows Update service remains up and running, noting that the service never connected to Windowsupdate.com. Access to Windows Update is built into the latest versions of Microsoft's Windows client and server operating systems.

To get the latest patches, consumers can type in windowsupdate.microsoft.com or, as Microsoft would prefer, go to the main Microsoft.com page, where they can find information on downloading patches as well as on setting up a firewall and installing antivirus software.

The worm is programmed to start attacking Windowsupdate.com at midnight Friday in each time zone. As a result, Australia was among the first countries slated to be affected, with its midnight hitting at 7 a.m. PDT.

Even as Microsoft battles the MSBlast worm, the company was hit late Thursday with a separate denial-of-service attack on its main Microsoft.com site. The site was largely inaccessible for about four hours, beginning at 9 p.m. PDT Thursday.

The company does not know the origin of the outage but said it stemmed from a denial-of-service attack unrelated to the MSBlast worm. Sundwall said Microsoft has "every confidence that it had nothing to do with 'Blaster,'" as the worm is also known.



TOPICS: Business/Economy; Crime/Corruption; Culture/Society; Extended News; News/Current Events; Technical
KEYWORDS: blaster; foiled; lowqualitycrap; microsoft; virus; windows; windowsupdate; worm
Navigation: use the links below to view more comments.
first 1-2021-4041-6061-8081-86 next last
This is called the "poison pill" option - Microsoft suicides the WindowsUpdate site rather than suffer the embarassment of having the site pulverized by a massive trojan worm attack.
1 posted on 08/15/2003 12:47:12 PM PDT by HAL9000
[ Post Reply | Private Reply | View Replies]

To: HAL9000
Does this mean I'll stop getting those stupid little popup reminders?
2 posted on 08/15/2003 12:49:10 PM PDT by gov_bean_ counter
[ Post Reply | Private Reply | To 1 | View Replies]

To: HAL9000
OK...

The next worm will attack windowsupdate.microsoft.com
3 posted on 08/15/2003 12:49:43 PM PDT by jbstrick (Behold the Power of CHEESE!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: HAL9000
It sounds like a surrender.

I've always thought Gates looked a little French.

(Not as French as Vietnam Veteran John Kerry, who served in Vietnam during the Vietnam War, but French none-the-less.)

4 posted on 08/15/2003 12:50:22 PM PDT by dead (Perdicaris alive or Raisuli dead!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: gov_bean_ counter
Does this mean I'll stop getting those stupid little popup reminders?

No. But we can tell you how to turn that bug "feature" off if you'd like.

5 posted on 08/15/2003 12:50:28 PM PDT by Timesink
[ Post Reply | Private Reply | To 2 | View Replies]

To: Timesink
Please do.
6 posted on 08/15/2003 12:51:03 PM PDT by gov_bean_ counter
[ Post Reply | Private Reply | To 5 | View Replies]

To: HAL9000
This is called the "poison pill" option - Microsoft suicides the WindowsUpdate site rather than suffer the embarassment of having the site pulverized by a massive trojan worm attack.

It will be interesting to see their response when the next trojan worm goes after microsoft.com.

7 posted on 08/15/2003 12:51:25 PM PDT by Timesink
[ Post Reply | Private Reply | To 1 | View Replies]

To: gov_bean_ counter
And ping me when you reveal that technique. (I have considered a hammer.)
8 posted on 08/15/2003 12:52:29 PM PDT by IGOTMINE (He needed killin')
[ Post Reply | Private Reply | To 6 | View Replies]

To: HAL9000
Wow, and to think I was mad when I had to fix thier software I paid for. They must be worse off to change the IP. Its like walking away from a great baseball game in the 8th inning.
9 posted on 08/15/2003 12:52:30 PM PDT by Baseballguy
[ Post Reply | Private Reply | To 1 | View Replies]

To: gov_bean_ counter
You can turn them off if your are talking about windows update . If its the worm you might want to clear your registry.
10 posted on 08/15/2003 12:53:22 PM PDT by Baseballguy
[ Post Reply | Private Reply | To 2 | View Replies]

To: HAL9000
why don't they just run the windowsupdate.com site on Solaris.
11 posted on 08/15/2003 12:54:34 PM PDT by oceanview
[ Post Reply | Private Reply | To 1 | View Replies]

To: gov_bean_ counter; IGOTMINE
Go here, scroll down to "'net send' Messenger Service," and follow the instructions.

Fair warning: If you're in an office environment, your IT department may have a legitimate use for Windows Messenger, and you should ask one of your in-house geeks for assistance. Also, certain antivirus programs use the Messenger service to alert you to possible attacks, so make sure your antivirus program isn't one that relies on Windows Messenger.

(Also note that Windows Messenger is not the same thing as the MSN Instant Messenger that people use to chat with each other online. Windows Messenger is only for sending out "alerts" that cause those pop-up boxes in the middle of your screen when you least expect it.)

12 posted on 08/15/2003 1:04:39 PM PDT by Timesink
[ Post Reply | Private Reply | To 6 | View Replies]

To: Baseballguy; Lil'freeper


No worries mate!

13 posted on 08/15/2003 1:05:01 PM PDT by big'ol_freeper ("When do I get to lift my leg on the liberal?")
[ Post Reply | Private Reply | To 9 | View Replies]

To: Timesink
Many thanks. I really should read my Kim Komando updates, eh? LOL.
14 posted on 08/15/2003 1:06:58 PM PDT by gov_bean_ counter
[ Post Reply | Private Reply | To 12 | View Replies]

To: dead
I've always thought Gates looked a little French.

Gates, a modern-day Napoleon?

15 posted on 08/15/2003 1:09:51 PM PDT by HAL9000
[ Post Reply | Private Reply | To 4 | View Replies]

To: HAL9000; Admin Moderator
Title in brackets is wrong. The article says PART of windows update, not all of it. Simply go to http://v4.windowsupdate.microsoft.com/en/default.asp and you'll see. Or read the article. But that would be too easy.
16 posted on 08/15/2003 1:10:16 PM PDT by RedBloodedAmerican (|=|)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Timesink
It's not a bug; it is a program that is enabled in Control Panel. User error, if someone doesn't know how to disable it.
17 posted on 08/15/2003 1:11:27 PM PDT by RedBloodedAmerican
[ Post Reply | Private Reply | To 5 | View Replies]

To: dead
(Not as French as Vietnam Veteran John Kerry, who served in Vietnam during the Vietnam War, but French none-the-less.)

You left out:
Hero
Medals
Ribbons

18 posted on 08/15/2003 1:12:43 PM PDT by Eaker (This is OUR country; let's take it back!!!!!)
[ Post Reply | Private Reply | To 4 | View Replies]

To: dead
Hey, didn't Kerry serve in Vietnam?

That swiss-cheese eating surrender monkey!

19 posted on 08/15/2003 1:12:53 PM PDT by Lunatic Fringe (When news breaks, we fix it.)
[ Post Reply | Private Reply | To 4 | View Replies]

To: Timesink
I think he was referring to the popups that Windows Update shows.
20 posted on 08/15/2003 1:15:14 PM PDT by Lunatic Fringe (When news breaks, we fix it.)
[ Post Reply | Private Reply | To 12 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-4041-6061-8081-86 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson