Matrix Games Forums

Forums  Register  Login  Photo Gallery  Member List  Search  Calendars  FAQ 

My Profile  Inbox  Address Book  My Subscription  My Forums  Log Out

Virus Alert

 
View related threads: (in this forum | in all forums)

Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [General] >> General Discussion >> Virus Alert Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
Virus Alert - 8/12/2003 11:07:26 PM   
riverbravo


Posts: 1320
Joined: 1/16/2003
From: Bay St Louis Ms.
Status: offline
There is a nasty virus called the "worm blaster".

I picked it up.There is a patch and a removal tool.

The bug attacks windows and causes the system to shutdown in 1 min.You cant stop it from shuttimng down,you can only watch the time tick down as you try to stop it.

I got it last night.I got the fix it patch and it still didnt root out the foul abomination.So I had to pull out the big guns and get the removal too from symatec.[URL=http://symatec]symatec[/URL]

It will also cause you to not log on for a bit after removal,at least it did me,maybe it attacked my ISP?

GOOD lUCK I hope you guys are in the clear.

better check out youre systems just in case.

_____________________________

I laugh at hurricanes!
Post #: 1
- 8/13/2003 2:33:22 AM   
Blunderbuss

 

Posts: 178
Joined: 6/22/2003
From: Consett, NE England
Status: offline
Do you know where you picked this virus up from?

(in reply to riverbravo)
Post #: 2
- 8/13/2003 2:46:41 AM   
Marc von Martial


Posts: 10875
Joined: 1/4/2001
From: Bonn, Germany
Status: offline
Read this (includes removal)

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

_____________________________


(in reply to riverbravo)
Post #: 3
- 8/13/2003 2:48:04 AM   
Marc von Martial


Posts: 10875
Joined: 1/4/2001
From: Bonn, Germany
Status: offline
[QUOTE]better check out youre systems just in case.[/QUOTE]

No, start spending that 20$ on Norton Antivirus or McAffee ;). I never had a virus struck me in 2 years now.

_____________________________


(in reply to riverbravo)
Post #: 4
- 8/13/2003 2:51:39 AM   
Mr.Frag


Posts: 13410
Joined: 12/18/2002
From: Purgatory
Status: offline
This virus is all over the place. It attacks based on the RPC endpoint mapper so pretty much every single machine running Windows can get hit by it.

Part of the virus actually does Denial of Service attacks on Microsoft to try and prevent you from being able to download the service packs and fixes required.

Take this one seriously, it has probably hit about a 1/4 of the PC's on the planet so far and is spreading like wildfire now.

Information:

http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

There is a removal tool located there, but simply removing it does not fix the problem as you can be re-infected.

Microsoft Patch:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp

(hey Marc, quit typing faster then me!)

(in reply to riverbravo)
Post #: 5
- 8/13/2003 2:59:04 AM   
Fallschirmjager


Posts: 6793
Joined: 3/18/2002
From: Chattanooga, Tennessee
Status: offline
Best protection is just to be careful


I have all cookies blocked except those I allow
I dont open ppl from e-mail I do not know
Is someone sends me a e-mail and I know them..but I they did not tell me they are putting an attachment with it...I will not open it
I never let webpages auto-download software
I always format disks and cds before using them

A little common sense will go a long way

_____________________________


(in reply to riverbravo)
Post #: 6
- 8/13/2003 3:24:04 AM   
Marc von Martial


Posts: 10875
Joined: 1/4/2001
From: Bonn, Germany
Status: offline
[QUOTE]Originally posted by Mr.Frag
[B]This virus is all over the place. It attacks based on the RPC endpoint mapper so pretty much every single machine running Windows can get hit by it.

Part of the virus actually does Denial of Service attacks on Microsoft to try and prevent you from being able to download the service packs and fixes required.

Take this one seriously, it has probably hit about a 1/4 of the PC's on the planet so far and is spreading like wildfire now.


[/B][/QUOTE]

Sounds like a "Terminator 3" advertising gag, LOL

_____________________________


(in reply to riverbravo)
Post #: 7
- 8/13/2003 3:25:31 AM   
Mr.Frag


Posts: 13410
Joined: 12/18/2002
From: Purgatory
Status: offline
Hey Fall, unless you are specifically running some port blocking protection, you are wide open to this particular exploit.

Open up a command prompt and type:

netstat -an | more

You will see on the very first page:

TCP 0.0.0.0:135 0.0.0.0:0 LISTENING

Thats the attack port. Unless you are blocking port 135 from the Internet, you can be hit. :eek:

Any of the many Personal Stealth Firewalls can protect you, but really, I agree with Marc, anyone not running some form of virus protection these days is simply playing with loaded dice. It is just a matter of time.

This actual issue and it's fix was released on the 17th last month, yet today, people are still getting creamed by it because they always think they are safe. :rolleyes:

(in reply to riverbravo)
Post #: 8
- 8/13/2003 3:27:06 AM   
Les_the_Sarge_9_1

 

Posts: 4392
Joined: 12/29/2000
Status: offline
Hear hear Fallschirmjager

I have my anti virus set
anti social mode generally speaking, but I surf at will and have not had troubles.

The main reason is I DO NOT open email I don't recognise ever.

I have found that careless thinking with email goes the farthest with doing damage.

In aaaaaaaall the years online, I have only been effected by viruses twice (that's since 1990 in my case). And in both cases I had downloaded an infected file.

_____________________________

I LIKE that my life bothers them,
Why should I be the only one bothered by it eh.

(in reply to riverbravo)
Post #: 9
- 8/13/2003 3:28:13 AM   
Fallschirmjager


Posts: 6793
Joined: 3/18/2002
From: Chattanooga, Tennessee
Status: offline
I only have one port open

and unlike my dumbass friends...I turn my broadband off when not in use
added protection..and its courteous to other users

_____________________________


(in reply to riverbravo)
Post #: 10
- 8/13/2003 3:33:20 AM   
Marc von Martial


Posts: 10875
Joined: 1/4/2001
From: Bonn, Germany
Status: offline
[QUOTE]I only have one port open[/QUOTE]

And that is ?

_____________________________


(in reply to riverbravo)
Post #: 11
- 8/13/2003 3:40:58 AM   
Marc von Martial


Posts: 10875
Joined: 1/4/2001
From: Bonn, Germany
Status: offline
Seriously youhave way more open, that´s for sure.

_____________________________


(in reply to riverbravo)
Post #: 12
- 8/13/2003 4:01:53 AM   
Procrustes

 

Posts: 633
Joined: 3/30/2003
From: Upstate
Status: offline
This one takes advantage of specific holes in Windows. If you do the "windows update" you can't get hit. But you should still run an antivirus and a firewall if you can. (I finally got my McAfee firewall configured right - been amazed at the number of intrusive pings and queries that get stopped. Last week even had a couple of people searching for open ports on my home computer.)

(in reply to riverbravo)
Post #: 13
- 8/13/2003 4:44:47 AM   
Marc von Martial


Posts: 10875
Joined: 1/4/2001
From: Bonn, Germany
Status: offline
[QUOTE]been amazed at the number of intrusive pings and queries that get stopped. [/QUOTE]

Oh yes, I have some 50 security warning per day beeing blocked by my software firewall, and that´s the stuff that get through the Linksys router hardware firewall ;)

Port Scans are a piece of cake, anybody can do them.

_____________________________


(in reply to riverbravo)
Post #: 14
- 8/13/2003 4:53:30 AM   
Bobthehatchit


Posts: 1478
Joined: 4/27/2003
From: GREAT BRITAIN
Status: offline
I work for an IT firm, and it been doing nuts all day lots of people got stung by this and lots more will tomorrow.

Its gona be another crappy day tomorrow, who ever produced this little gem need kneecapping.:mad:

_____________________________

"Look at yours before laughing at mine". Garfield 1984.

Wanted: ISDII Low millage in Imperial gray.


Just my 2 pence worth.
I might not be right.
Hell I am probaby wrong.
But thats my opinion for what its worth!

(in reply to riverbravo)
Post #: 15
- 8/13/2003 4:55:01 AM   
Pawlock

 

Posts: 1041
Joined: 9/18/2002
From: U.K.
Status: offline
Hmm, I picked that little Motherf*cker up last week and it drove me bonkers I can tell you.


It shuts down your pc after 1 min and timed for 1 min. Well it was a nighmare to saty online long enought to d/load the nessecary file to eradicate it.

(in reply to riverbravo)
Post #: 16
- 8/13/2003 4:59:09 AM   
Bobthehatchit


Posts: 1478
Joined: 4/27/2003
From: GREAT BRITAIN
Status: offline
[QUOTE]Originally posted by Pawlock
[B]Hmm, I picked that little Motherf*cker up last week and it drove me bonkers I can tell you.


It shuts down your pc after 1 min and timed for 1 min. Well it was a nighmare to saty online long enought to d/load the nessecary file to eradicate it. [/B][/QUOTE]

You can stop the shut down process by going:

Click Start/Run/ type "shutdown /a" without the "" and run this

_____________________________

"Look at yours before laughing at mine". Garfield 1984.

Wanted: ISDII Low millage in Imperial gray.


Just my 2 pence worth.
I might not be right.
Hell I am probaby wrong.
But thats my opinion for what its worth!

(in reply to riverbravo)
Post #: 17
- 8/13/2003 5:18:58 AM   
Marc von Martial


Posts: 10875
Joined: 1/4/2001
From: Bonn, Germany
Status: offline
[QUOTE]Originally posted by Bobthehatchit
[B]I work for an IT firm, and it been doing nuts all day lots of people got stung by this and lots more will tomorrow.

Its gona be another crappy day tomorrow, who ever produced this little gem need kneecapping.:mad: [/B][/QUOTE]

But then again these guys secure jobs, LOL ;).

_____________________________


(in reply to riverbravo)
Post #: 18
- 8/13/2003 5:36:09 AM   
Bobthehatchit


Posts: 1478
Joined: 4/27/2003
From: GREAT BRITAIN
Status: offline
[QUOTE]Originally posted by Marc Schwanebeck
[B]But then again these guys secure jobs, LOL ;). [/B][/QUOTE]

I can live without that kind of help!

Althought the company did shift every copy of av software in the place! And quite a few copies that we don't have as of yet..... althought the customers don't need to know that!:D

_____________________________

"Look at yours before laughing at mine". Garfield 1984.

Wanted: ISDII Low millage in Imperial gray.


Just my 2 pence worth.
I might not be right.
Hell I am probaby wrong.
But thats my opinion for what its worth!

(in reply to riverbravo)
Post #: 19
- 8/13/2003 6:34:48 AM   
Marc von Martial


Posts: 10875
Joined: 1/4/2001
From: Bonn, Germany
Status: offline
[QUOTE]I can live without that kind of help![/QUOTE]

Yeah, I hear you. I did this kind of "support" in the company Iworked before ;). Erasing viruses and stuff on a weekly basis, and that with every single machine "secured" ;)

_____________________________


(in reply to riverbravo)
Post #: 20
Lucked out - 8/13/2003 11:55:30 AM   
chief


Posts: 1660
Joined: 9/28/2000
From: Haines City FL, USA
Status: offline
I have two machines, one Windoze 95, the one I'm on now, I had just updated my virus protection even though it (virus/worm) didn't effect 95 machines. But unfortunately my new laptop with XP wasn't updated yet and would you know that when I went in to update it it got the bug. Fortunately I was able to download patch which gave me time to load virus update and removal tool. Now both of my machines are clean again. Nasty little bug, my first virus ever and I hope my last. :D :D :cool:

_____________________________

"God Bless America and All the Young men and women who give their all to protect Her"....chief

(in reply to riverbravo)
Post #: 21
- 8/13/2003 5:54:48 PM   
BrubakerII


Posts: 538
Joined: 9/15/2002
From: Adelaide Australia
Status: offline
Have to admit I was struck by this baby last night myself. Run an auto daily upgard on my virus check and a Kerio firewall as well. Dan thing got past me though - go figure. In retrospect those times I disabled the viruscheck in order to get better pings online got me :o Hats off to the little p*rck that thought this one up.

Out of interest a virus site I visit claims Microsoft have a fix for this in one of their XP patches. Maybe food for thought there in regards to updating their software as well.

Just completed a full format after getting jack with trying to eradicate the thing. Bummer. Still, everything does run fatser now ;)

Brubaker

(in reply to riverbravo)
Post #: 22
- 8/13/2003 6:15:31 PM   
Belisarius


Posts: 4041
Joined: 5/26/2001
From: Gothenburg, Sweden
Status: offline
Whew, I surrendered to the 'automatic update' thingy two weeks ago and let XP have it's way with updating and patching my system.

Kinda glad I did it now, I'm not hit yet at least. :D

_____________________________


Got StuG?

(in reply to riverbravo)
Post #: 23
- 8/13/2003 9:11:42 PM   
Pippin


Posts: 1233
Joined: 11/9/2002
Status: offline
I refuse to ever use MS auto updater again. Twice it messed up my registries and rendered my system unbootable.

_____________________________

Nelson stood on deck and observed as the last of the Spanish fleets sank below the waves…

(in reply to riverbravo)
Post #: 24
- 8/13/2003 9:26:03 PM   
Belisarius


Posts: 4041
Joined: 5/26/2001
From: Gothenburg, Sweden
Status: offline
[QUOTE]Originally posted by Pippin
[B]I refuse to ever use MS auto updater again. Twice it messed up my registries and rendered my system unbootable. [/B][/QUOTE]

Guess I'm double lucky then.

I think I'll play on the lottery.... :p :D

_____________________________


Got StuG?

(in reply to riverbravo)
Post #: 25
- 8/14/2003 12:51:24 AM   
Cobra1944

 

Posts: 4
Joined: 8/12/2003
From: USA
Status: offline
How is this virus spread?

Can I pick it up merely by getting on the Internet?

_____________________________

Juillet MCMXLIV

(in reply to riverbravo)
Post #: 26
The best answer - 8/14/2003 1:30:32 AM   
chief


Posts: 1660
Joined: 9/28/2000
From: Haines City FL, USA
Status: offline
Cobra: go to the MSN site on the WEB and read about the worm, its the best place to get the correct answer and with less confusion on how its spread.

Oh by the way Welcome aboard.:) :cool:

_____________________________

"God Bless America and All the Young men and women who give their all to protect Her"....chief

(in reply to riverbravo)
Post #: 27
- 8/14/2003 5:57:23 AM   
Marc von Martial


Posts: 10875
Joined: 1/4/2001
From: Bonn, Germany
Status: offline
[QUOTE]Originally posted by Cobra1944
[B]How is this virus spread?

Can I pick it up merely by getting on the Internet? [/B][/QUOTE]

Read about it here:

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

_____________________________


(in reply to riverbravo)
Post #: 28
- 8/14/2003 9:48:27 AM   
Les_the_Sarge_9_1

 

Posts: 4392
Joined: 12/29/2000
Status: offline
I read that report Marc, but would this worm slow down a system over all.

Last couple of days my own systems seems to have gotten slow sort of. The typing in the post composition box seems choppy for instance.

Or could it be something totally unrelated to this hassle?

_____________________________

I LIKE that my life bothers them,
Why should I be the only one bothered by it eh.

(in reply to riverbravo)
Post #: 29
- 8/14/2003 1:55:00 PM   
BrubakerII


Posts: 538
Joined: 9/15/2002
From: Adelaide Australia
Status: offline
Les if you run a full up to date virus scan on your system you will find out if you have it or not.

Brubaker

(in reply to riverbravo)
Post #: 30
Page:   [1] 2   next >   >>
All Forums >> [General] >> General Discussion >> Virus Alert Page: [1] 2   next >   >>
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 ANSI

1.250