Hey guys, I just want to know if anyone knows exactly how the trojan msblast works? My svchost.exe has been crashing lately, and after a few moments i remembered that it was teh behavior of msblast on unpatched windows against this vulnerability. But whats amazing, is that my windows is already patched (service pack2) and completely clean from any kind of malaware. Nevertheless i closed port 135 and the problem dissapeared. So i confirmed to myself that this is msblast behaviour but i cannot explain how it worked. Patched windows and clean pc and still i was under the effect of it. Maybe someone has a clue.
I think you may have stumbled into this: http://swigartconsulting.blogs.com/tech_blender/2006/07/windows_update_.html