NEWS FROM THE LAB - Saturday, March 20, 2004

The destructiveness of Witty Posted by Mikko @ 21:39 GMT

The Witty worm is going around fast...but only affects users running BlackIce software. However, on infected machines the worm seems to do really bad damage, overwriting random parts of the hard drive as long as the machine is infected.

Remember, disinfection is as easy as disconnecting the machine from the internet and rebooting it.

Unfortunately there might be lots of overwritten machines waiting at workplaces on Monday morning.

ISS (vendor behind BlackIce) now has a public advisory on this at