
05-07-2004, 05:19 AM
|
|
Editor Emeritus
Join Date: Aug 2006
Posts: 15,171
|
|
Re: Just how does it "automatically infect"?
Quote:
|
Originally Posted by DerekTheGeek
I am a little confused. How can this "virus" infect a system without executing some program or piece of code? I can understand it scanning for open ports but if one is behind a firewall what's the danger? Any links on how it works?
|
Addendum on what Ed said: it "injects" code through a software bug in the LSASS.EXE process, which listens for network connections by default.
If you're firewalled, you might not get hacked immediately -- but be careful, as if an infected machine (say, laptop) gets "behind" the firewall you'd be in huge trouble.
(If you have the built-in XP firewall turned on, it'll most likely mitigate the situation somewhat -- but you should still do a Windows Update ASAP!)
--janak
|
| |
|
|
|