»

[BlackThornn]

Anyone been hit by this pain in the ass?

It's a worm that was written by somebody who apparently knew coding and windows and all that enough to exploit a serious flaw in XP and 2000 security, but not well enough to do anything besides log people off the net or spread beyond a couple hundred thousand computers (no small accomplishment, but it's no "I love you" or "Code Red")

I got smacked by it last night, was up until 2 AM fixing the protection settings on my computer and downloading windows updates. Argh.

[dan da man]

awww man, I have Windows ME, so I dont know if I will get it or not, acctually my Broadband connection keeps disconnecting now and agian, I connect and it disconnects 2 mins later, or am I just paranoid!

[Chara]

I was real lucky. I decided to update my computer through windows update a day before this virus became widespread.

I still think they are serious flaws in window xp's security. When it was first released the home version was an hackers haven.

[Infernal Mass]

nah, but that sucks man.

I'm on windowsME over here still..thinking about getting the whole XP upgrade crackin' soon though.

[Preventer Wind]

I think I got it. I got some virus that screwed up my computer about a week ago. Luckily I was able to download a virus scanner and eliminate the problem. Only the problem was that I had over 700 files infected and they all had to be deleted rather than disinfected. So I had to erase everything and start from scratch. Luckily I was able to back up my music and important documents on data cds.

[kupoartist]

I assume that you have to be actually running Windows 2000 for this thing to work, as opposed to having it on your Hard Drive but running a different OS instead (win 98)?

[Zephyr]

Hey there everybody.

Got a bit of info for yas...


Virus Name: MSBlaster
Virus Defenition: W32.Blaster.Worm
Infects: Windows NT
Windows 2000
Windows XP
How to Be Infected: Simply go on the internet.


Payload/s: 1 - When on the Internet the virus (msblast.exe - shown in processes running) triggers and brings up a shutdown box with a minutes countdown. It then restarts the machine after a minute.

2 - On the 16th of August and until the end of the month the virsu denies access to Windows Update.


Removal: Use an uninfected Win 95/98 machoine to download a removal tool from Symantecs website and also downoad the security patch. Check with removal tool and if found it instantly fixes the file or deletes it. (Run removal tool in Safe Mode) Go back to Normal Windows and install the security patch you downloaded (make sure its either NT/2000/XP version to check it matches and then once installed go to connect to in the internet connection and click on your default dialler. Then DO NOT CONNECT but press properties and go to advanced. Then there is a message about stopping access to your computer - TURN IT ON.

Sorted. Then obviously update Norton or Mcafee whatever you use...



I GOT INFECTED WITH THIS ON MY LAPTOP AND I WAS NOT AMUSED...

[Gadzoox]

Wow, for once in my life i'm glad all I've got is Win 95!! Pathetic, eh? hee. *kisses her poor old laptop*

[Zephyr]

Wow, for once in my life i'm glad all I've got is Win 95!! Pathetic, eh? hee.

Good. I like my Win98 machine too. It does everything I ask it to do. It even managed to play GTAIII (slow but quite well).

*kisses her poor old laptop*

If you was me last night when I got it, you would have been kickoing it. I've bee busy all day with this thing. But it will always be my little laptop of doom. Just glad I renewed my virus subscription to Norton last week as well.

[kupoartist]

Originally posted by Zephyr
Payload/s: 1 - When on the Internet the virus (msblast.exe - shown in processes running) triggers and brings up a shutdown box with a minutes countdown. It then restarts the machine after a minute.

2 - On the 16th of August and until the end of the month the virsu denies access to Windows Update.

I'm either going to sound ignorant, cynical or just plain stupid, but is this all it does? I got the impression that it seriously damaged your system, instead of making you restart every five seconds. Any version of windows has that instability feature built in anyway!

i guess its annoying, but it really doesn't sound so big. The way some people were talking, it seemed the world's only hope was to call Keither Sutherland back in to save the world and it's political stability...

*cue noisy digital clock counting the seconds...*

[Carlito]

Originally posted by dan da man

awww man, I have Windows ME, so I dont know if I will get it or not

Quoting from Microsoft Security Bulletin:

Not Affected Software

Microsoft Windows Millennium Edition

It seems you're safe for now dan

[Pu the Owl]

Just for once I'm thankful my PC is still running this plague called Windows ME

[goodman]

I downloaded the security patch for XP a few days ago, plus have a firewall and virus protection. And yes, XP is a fair bit better than 98 and ME...

[Sleazy P Martini]

This virus has been just great for my work. We've been flooded with calls, because if you get a virus its automatically your ISP's fault and responsiblity

So many, many dumbasses in the world

As for the people running windows 95 and ME......

You have my sympathies

[BlackThornn]

I'm guessing the laptop of yours that got infected was running 2000? You don't need to use an uninfected computer if you have XP, just have to turn on the built-in firewall then sit through the download for the patch. With a standard update to my virus definitions (PC-Cillin) I was able to find the blaster and take it out after that.

Sleazy.. I feel sorry for you man! Too many dumbasses indeed. ^_^

[happy_doughnut]

I haven't gotten this worm, thankfully.

It's weird how it doesn't use the normal download/email way of spreading, but more of a backdoor operating system function.
I guess that continually sending connection requests to windowsupdate.com to make it look like people are actually requesting updates, and thus rendering the server useless since it's really just millions of fake requests to tie up connections to it, is one of the things that is hindering people from being able to get a fix for it.

Here's one fix I know of :



Click start, then right click my computer click manage
Go to services
double click on both RPC
go to recovery
change the 3 drop downs from restart to take no action

Get the patch and install
https://microsoft.com/downloads/deta...&displaylang=en

delete key in reg edit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Run "windows auto update"="msblast.exe"

Restart system, then have the customer go to antivirus vendor and have them update, then do the rest of the security updates from Microsoft



Yep.