West Coast Connection Forum
Lifestyle => Tha G-Spot => Topic started by: Don Seer on August 12, 2003, 12:26:10 PM
-
ok ya'll.. this "worm" for windows is doing the rounds.. lots of people everywhere are talking about it.. i just talked my friend thru fixing his PC... run the tool to check if you're infected.. and then if you are it will remove it.
even if you arent infected install the update because its spreading fast.
funnily my friend was moaning about that svchost thing crashing last night and we couldnt figure it.. then i noticed this on the board i go to to talk about running forum's ;)
Damn, the W32.Blaster/Lovscan was the first worm which infected my PC for the last 4 years. I always got a failure in scvhost.com. Was your PC also infected by the worm? Or was you able to install the MS patch before the worm could harm your PC.
If you are infected you should run the Worm Remover from Symantec
http://www.sarc.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
and install the Update from Microsoft
http://www.microsoft.com/security/security_bulletins/ms03-026.asp
-
Thanks for the heads up.
This is the first time in damn near 7 years that I've been infected with a virus!
I really have NO idea how I got it.
-
i've heard varying reports on what this does on peoples machines.. maybe dependant on OS... my friend was running windows 2000
-
I noticed a LARGE amountof traffic going thru my cable modem which I thought was strange because I wasn't doing anything to bandwith intensive.
I ran a virus scan but hadn't updated the definitions in a while so nothing came up.
Then the shit hit the fan. I got a "RPC" error and a window popped up that said there had been a error and windows would shut down in 60 seconds. I thought it was strange but there was nothing I could do with the window so the computer shut down. Every time I restarted I only had I'd say 5 mabey 6 mins before I would get the message again. I updated my definitions and then did some searching and did some windows updates. I found the link to the patch and installed it. It's been smooth sailng ever since. bdahh daa bah bahh bahhh bahhh
-
<engelwood> http://www.washingtonpost.com/wp-dyn/articles/A46233-2003Aug11.html
-
thanx ;)
-
I'ma make this sticky.
A Security Expert is quoted saying it might become the biggest virus ever.. and added: "I don't think the world's coming to an end."
This virus installs itself, looks for other machines to infect through internet.. it may install ifself without any downloading or installing or anything.
Even the American government have sent out a warning to companies.. and they don't usually do that.
-
thanx man
-
Microsoft .NET Framework Service Pack 2, English Version
Microsoft .NET Framework Service Pack 2 resolves various issues found after the initial release of Microsoft .NET Framework. These include both security- and non-security-related issues.
To see a list of changes included in this service pack, read Microsoft. Knowledge Base Article Q321884. (This site is in English.)
Is that the 1 I need to install?
-
ALSO--
not sure how true this is..
i was told you cant get the virus if ur running NTFS instead of WIN32
-
I read on ceefax you don't need to instal it when you got a firewall. :-\
-
weird.. well i'm behind a adsl network router.. wonder if that counts...(maybe since i didnt get it) also runing NTFS (since i need huge partitions ;))
-
what does this virus do?
-
what does this virus do?
it fucks up your computer :P
-
like how?
-
Damn ill have to try this...ive had no choice on several occasions about my pc shutting down for no reason
:(
Thanks guys
-
I read on ceefax you don't need to instal it when you got a firewall. :-\
Im running a firewall (Norton) and I'm also runing NTFS.
I went to that windows update site that Seer linked us too and it said that only had to update 11 things--and I dont think any of them had anything to do with this virus.
-
weird.. well i'm behind a adsl network router.. wonder if that counts...(maybe since i didnt get it) also runing NTFS (since i need huge partitions ;))
'NAT' should have saved your bacon as it will have only opened the ports you asked to use. If you want to be doubly sure get your router to foward the ports this exploit uses to nowhere.
from neowin.net :
"User's should block access to TCP port 4444 at the firewall level. User's should also block the following ports, if they do not use applicaitons listed:
TCP Port 135, "DCOM RPC"
UDP Port 69, "TFTP""
also if you visit grc.com with this link : https://grc.com/x/portprobe=135 (https://grc.com/x/portprobe=135), his site will 'probe' (ooo-er!) the port the virus uses to enter your system, you can also test the 4444 port using https://grc.com/x/portprobe=4444 (https://grc.com/x/portprobe=4444). 'Stealthed' is the best result but 'closed' will do, if it says open then make sure you get patched quick. It's worth patching anyway just in case you reconfigure the firewall and forget it at anypoint in the future. btw windowsupdate site is at a halt right now !
-
yeah i found that info out after this..
tries probes...
135 - stealthed
4444 - stealthed
69 - closed
so i'm clean ;)
-
Nimda & Code Red were worse than this, but this virus has the potential to be big if people dont stop it quickly.
cant be bothered going into the technical side of things on how it works, but if you use a ADSL firewall/router, it depends on how its all setup, so you probably will need to install the patch. Norton is easy enough to get around, I wouldn't really trust it, just keep your virus patterns updated
-
just got rid of that virus..... props to 'seer for linking us to the virus fixer-upperer ;D
-
If you don't have the worm yet but you want to protect your PC against it, what link do I have to check? The first or the second?
Thx
-
i dont think u can really prevent it..... from what i heard......
-
Hmm didnt seem to do anything for me :(
turned off autobackup...i ran the prog...rebooted n tried to run it again as advised....
but after running it comes up with fix...caused an error and will have to close and there is nothing in the .txt document that the fix creates...
i hate winxp sometimes
on a bright note..my pc hasnt come up with that problem for a week now lol ('s gonna crash today now i know it ;) )
-
Ive had it before this topic appeared, some message came up about my PC was going to shut down in 60 Seconds so I installed a patch against it from a dutch forum within those 60 Seconds :D hehe I beated the virus, I had like 3 seconds left...
-
Ive had it before this topic appeared, some message came up about my PC was going to shut down in 60 Seconds so I installed a patch against it from a dutch forum within those 60 Seconds :D hehe I beated the virus, I had like 3 seconds left...
can you sen me this please ?
i only had it happen twice...mon 2 weeks ago and thurs 2 weeks ago...nothing since..but ya never know ???
pe@ce
-
I am on Win 98 so I am ok aint I???
It said on the microsoft page that it only affects Windows NT, 2000 and Xp, so I am alrite aren't I???
-
Yes, this wont effect your system.
-
I am on Win 98 so I am ok aint I???
It said on the microsoft page that it only affects Windows NT, 2000 and Xp, so I am alrite aren't I???
Yes, it only affects these systems:
* Windows Server 2003 (All Versions)
* Windows XP (All Versions)
* Windows 2000 (All Versions)
* Windows NT 4.0 (All Versions)
And to those who have the virus and have installed the patch, you need to get rid of the actual virus, as it overruns the patch.
Doing this can be done in safe-mode.. or by updating your anti-virus, and then run a virus-check on the C:\WINDOWS\system32 folder only.. that's the location if you run Win Xp.. dont do a full scan, cuz the machine will do the countdown before the scan it through.
-
is it impossible to get the virus if u running Windows ME ?
cuz I got a program without any description which is constantly askin the firewall for permission to access the internet.. it won't stop when I check "remember this answer the next time I use this program" (I always klick 'No').. When I klick on "more info" there's just an error on the upcoming page..
-
is it impossible to get the virus if u running Windows ME ?
Yes.
-
i think ive got windows me ??? im not sure now.......
-
^ u at work now tho right?
..coz the board tells me at work u got XP ;)
-
yeah....im at work......i think they have all these anti virus things cuz everyone has the net on their pc's, but at home i dont so i probably wont put my computer on for about a week ;D
-
well like they said above.. if your using ME (sure u told me that before too..) then you're safe anyways :)
-
yeah...im sure its ME......cheers big O ;D
-
damn
-
shit i cant patch my system, cuz that worm patch requires sp2 or higher and i dont got it :-\
the installtion of the sp is online and the m$ server fucked up.
damn im the only one who don't protected :(
-
Has anybody seen the code in its number form on the news.
The creater of the virus put "Hello Bill" in the coding. lol
-
shit i cant patch my system, cuz that worm patch requires sp2 or higher and i dont got it :-\
the installtion of the sp is online and the m$ server fucked up.
damn im the only one who don't protected :(
download the network version and run that instead... ;)
its the same, its just meant for companies thatmight have to install it 100 times.. better to dld once and distro on their internal network :)
-
Has anybody seen the code in its number form on the news.
The creater of the virus put "Hello Bill" in the coding. lol
One small clue might be that the worm's creators seem to have a sense of humor.
According to security firm TrendMicro, the following message aimed at Microsoft's chairman Bill Gates is embedded in the text:
"I just want to say LOVE YOU SAN!! Billy Gates why do you make this possible? Stop making money and fix your software!!"
-
shit i cant patch my system, cuz that worm patch requires sp2 or higher and i dont got it :-\
the installtion of the sp is online and the m$ server fucked up.
damn im the only one who don't protected :(
download the network version and run that instead... ;)
its the same, its just meant for companies thatmight have to install it 100 times.. better to dld once and distro on their internal network :)
koo, can u post a link with network version? didnt find it at ms website...
-
http://www.microsoft.com/Windows2000/downloads/servicepacks/sp4/
its not hard to find...
click 'go' next to download.. then in roughly the same place on the next page u get a few choices.. there are two boxes.. the 2nd link in the lower box is the netowrk one.. ;)
-
oh lol i searched for that patch and not for the sp :o
sorry my fault lol
d/l and install it later.
thanks anyway seer ;D
-
I downloaded and installed the patch (or what I think is the right patch) and nothing happened after that. Is there a place I goto to run the program?
-
thaaaaaaaaaaank yoooooooooooouuu....this mudafucka had been turnin my pc off everytime i fuckin went on it....this was like the first time in months i got round 2 peepin the g spot....and i found the cure fa dat shit....mad props...
-
is this virus still a major problem?? i havent heard many people bitching about it lately