Hi EQF. If this is what you’re referring to this isn’t a virus. It is worm.

The worm has infected at least 120,000 computers and has caused internal disruptions for many companies and Internet service providers. Gullotto said that a "few hundred" Network Associates' clients had been infected with MSBlast.

However, computers connected to the Internet aren't the only target. Starting on Saturday, every computer infected with MSBlast is expected to start flooding Microsoft's Windows Update service with legitimate-looking connection requests. The denial-of-service attack could slow--and even halt--access to the primary way Microsoft customers receive updates for their computers.

Unlike the common mass-mailing viruses that spread by hitching a ride on e-mail messages, Internet worms don't attach themselves to files and don't need user intervention to spread.

The MSBlast worm infects other computers by trying to connect to 20 different Internet addresses at the same time using methods identical to those of an exploit program refined by security researchers and hackers on the Internet. That program, known as dcom.c, attempts to use vulnerability in a widely used component of the operating system that allows other computers to ask Windows systems to perform an action or service. Microsoft issued a warning about the flaw on July 16.

The worm contains two messages in its code. One is a "greet"--an underground programmer greeting--to another person, which could be a lead for law enforcement agencies that pursue the worm's author. The greet reads, "I just want to say LOVE YOU SAN!!"

The other message is addressed to Microsoft founder Bill Gates: "billy gates why do you make this possible?" it says. "Stop making money and fix your software!!"

I think it’s kind of cute to send Bill a message this way. At least it should get his attention. As to whether he will do anything about remains to be seen. Take Care…Don in creepy town

http://www.zdnet.com/

• ZDnet