If you've got the new virus/worm, look here before requesting aid

Bossy Monkey

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-12-03 06:49 PM
Original message

If you've got the new virus/worm, look here before requesting aid

A brief compendium (or is that index?) of DU wisdom on the subject:
http://www.democraticunderground.com/discuss/duboard.php?az=show_topic&forum=111&topic_id=3749
http://www.democraticunderground.com/discuss/duboard.php?az=show_topic&forum=105&topic_id=89275
http://www.democraticunderground.com/discuss/duboard.php?az=show_topic&forum=105&topic_id=89064
http://www.democraticunderground.com/discuss/duboard.php?az=show_topic&forum=105&topic_id=89652

Here's the poop from McAfee:
http://vil.nai.com/vil/content/v_100547.htm

Good luck. Don't panic.

Lounge lizards, kindly keep this kicked.

Printer Friendly | Permalink | | Top

Cha

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-12-03 06:58 PM
Response to Original message

1. Kick!

:kick:

I think that http://www.bartcop.com link is a good link for the "wormblaster" virus that I had for microsoft windows.

Printer Friendly | Permalink | | Top

Cha

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-12-03 06:59 PM
Response to Original message

2. And thanks for this composit, UNL!

:-)

Printer Friendly | Permalink | | Top

SOteric

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-12-03 07:03 PM
Response to Original message

3. You left out:

http://www.democraticunderground.com/discuss/duboard.php?az=show_topic&forum=105&topic_id=87277&mesg_id=87277

The link in which describes how you patch the buffer over-run, then removed the virus, then remove the executable files in regedit regardless of which of the vulnerable editions of Windows one is running.

Luck to all, and remain calm. There is life again after Blaster.

:hi:

Printer Friendly | Permalink | | Top

Bossy Monkey

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-12-03 07:08 PM
Response to Reply #3

4. Thanks!

I meant to suggest folks add any I missed.

Printer Friendly | Permalink | | Top

TrogL

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-12-03 07:25 PM
Response to Original message

5. You need these three patches

* Microsoft Security Bulletin MS03-030
Unchecked Buffer in DirectX Could Enable System Compromise (819696)

http://microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-030.asp

* Microsoft Security Bulletin MS03-026
Buffer Overrun In RPC Interface Could Allow Code Execution (823980)
http://microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp

* Microsoft Security Bulletin MS03-023
Buffer Overrun In HTML Converter Could Allow Code Execution (823559)
http://microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-023.asp

Make sure you get the correct file for your operating system.

Printer Friendly | Permalink | | Top

ParanoidPat

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-12-03 07:55 PM
Response to Reply #5

6. Thanks TrogL.....

....and a :kick: for the night crew! :evilgrin:

Printer Friendly | Permalink | | Top

GoddessOfGuinness

(1000+ posts) Send PM | Profile | Ignore

Wed Aug-13-03 12:29 AM
Response to Original message

7. kick

Printer Friendly | Permalink | | Top

opihimoimoi

(1000+ posts) Send PM | Profile | Ignore

Wed Aug-13-03 01:03 AM
Response to Reply #7

8. kick

:kick:

Printer Friendly | Permalink | | Top

Kenneth ken

(1000+ posts) Send PM | Profile | Ignore

Wed Aug-13-03 01:57 AM
Response to Original message

9. kick n/t

Printer Friendly | Permalink | | Top

Kamika

(1000+ posts) Send PM | Profile | Ignore

Wed Aug-13-03 04:18 AM
Response to Original message

10. To stop the countdown timer

Edited on Wed Aug-13-03 04:22 AM by Kamika

On XP/Win2K, if you get the shutdown message, you can fire up a command prompt (Start-->Run--> Type in "cmd" and hit return)

At the command prompt type "shutdown -a" and that will stop the shutdown process in its tracks allowing you to continue whatever it was you were doing to research the problem.

curtesy of markbark

Printer Friendly | Permalink | | Top

(1000+ posts) Send PM | Profile | Ignore

Wed Aug-13-03 12:06 PM
Response to Reply #10

18. Thank you!!!

I downloaded the Symantic fix at work, and ran it on my home computer (it took 10 minutes). At the end, it linked to the Microsoft patch, so I engaged my dial-up service. The worm got in and shut my computer down before the download was half finished! It does this every time.

I managed to download the patch at work and put it on a floppy, but It's good to have a backup in case I need to download something else.

BTW - would the autmatic Windows updates have prevented this? I disabled the auto updates after Microsoft announced they were cooperating with AssKKKroft. I guess I have to choose between Big Brother and the virus-writing anarchists.

Printer Friendly | Permalink | | Top

(1000+ posts) Send PM | Profile | Ignore

Wed Aug-13-03 04:30 AM
Response to Original message

11. true - no need to panic

by making the change in regedit i have been able to stop the reboots, and appearently thats the worst part of the bug.

but due to the demand i have been unable to d/l an antivirus yet. but i'll get that sucka yet!

Printer Friendly | Permalink | | Top

Kamika

(1000+ posts) Send PM | Profile | Ignore

Wed Aug-13-03 04:43 AM
Response to Reply #11

12. Go here

Its a online virus scan, it found my worm in the initial scannings of the system

http://housecall.antivirus.com/housecall/start_corp.asp

Printer Friendly | Permalink | | Top

UrbScotty

(1000+ posts) Send PM | Profile | Ignore

Wed Aug-13-03 11:41 AM
Response to Original message

13. So this does not affect Windows 98, right?

That's what I've heard.

Printer Friendly | Permalink | | Top

Bossy Monkey

(1000+ posts) Send PM | Profile | Ignore

Wed Aug-13-03 11:57 AM
Response to Reply #13

17. Right, according to Microsoft

whom you can trust as far as you can throw them, but still:
http://www.microsoft.com/security/incident/blast.asp

Printer Friendly | Permalink | | Top

myomy

(1000+ posts) Send PM | Profile | Ignore

Wed Aug-13-03 11:48 AM
Response to Original message

14. Step 2: Run down and buy a Mac.

Printer Friendly | Permalink | | Top

WilliamPitt

(1000+ posts) Send PM | Profile | Ignore

Wed Aug-13-03 11:49 AM
Response to Original message

15. This virus eats ass

This stuff'll help.

Printer Friendly | Permalink | | Top

ScreamingMeemie

(1000+ posts) Send PM | Profile | Ignore

Wed Aug-13-03 11:50 AM
Response to Original message

16. Ah crap, call me computer illiterate, but I cannot do the recommended

Edited on Wed Aug-13-03 11:58 AM by MrsGrumpy

fix on Microsoft because my computer locks up at Alt,Control,Delete..

Aiiieeeeeeeeeeeeeeeeeeeeeeeeeeee........

Printer Friendly | Permalink | | Top

Bossy Monkey

(1000+ posts) Send PM | Profile | Ignore

Wed Aug-13-03 01:54 PM
Response to Original message

19. kick 'cause somebody else asked

Printer Friendly | Permalink | | Top

newyawker99

(1000+ posts) Send PM | Profile | Ignore

Wed Aug-13-03 05:17 PM
Response to Reply #19

20. kick

:kick:

Printer Friendly | Permalink | | Top

bearfartinthewoods

(1000+ posts) Send PM | Profile | Ignore

Wed Aug-13-03 06:41 PM
Response to Reply #20

21. kick

Printer Friendly | Permalink | | Top

Kamika

(1000+ posts) Send PM | Profile | Ignore

Thu Aug-14-03 03:52 AM
Response to Reply #21

22. klick

Printer Friendly | Permalink | | Top

DU AdBot (1000+ posts)

Fri May 03rd 2024, 06:50 AM
Response to Original message

Advertisements [?]

Top

Powered by DCForum+ Version 1.1 Copyright 1997-2002 DCScripts.com
Software has been extensively modified by the DU administrators

Important Notices: By participating on this discussion board, visitors agree to abide by the rules outlined on our Rules page. Messages posted on the Democratic Underground Discussion Forums are the opinions of the individuals who post them, and do not necessarily represent the opinions of Democratic Underground, LLC.