Notices
ScoobyNet General General Subaru Discussion

new virus around

Old Aug 12, 2003 | 12:28 PM
  #1  
catalunya199's Avatar
catalunya199
Thread Starter
Scooby Regular
 
Joined: May 2003
Posts: 689
Likes: 0
Post

omg peeps i couldnt get on for a day cause of some **** doing a virus[img]images/smilies/mad.gif[/img] basically it effects windows xp when you turn on it tells you your going to restart in 60 secs.if this happens to you dont worry go to scoobycity and someone has done a link to protect you from it i have just done and thank god i did the download takes secs on broadband as well
Reply
Old Aug 12, 2003 | 12:32 PM
  #2  
ianmiller999's Avatar
ianmiller999
Scooby Regular
 
Joined: Feb 2003
Posts: 1,285
Likes: 0
Post

you couldn't post the link here could you?

I am guessing from what I have heard of people being affected that this is going to be far more catastophic the the love bug.
Reply
Old Aug 12, 2003 | 12:35 PM
  #3  
ianmiller999's Avatar
ianmiller999
Scooby Regular
 
Joined: Feb 2003
Posts: 1,285
Likes: 0
Post

Ohh and Mods I suggest leaving this in General as it has a wider audience.
Reply
Old Aug 12, 2003 | 12:40 PM
  #5  
catalunya199's Avatar
catalunya199
Thread Starter
Scooby Regular
 
Joined: May 2003
Posts: 689
Likes: 0
Post

soory mate i dont no how to do links but check out scoobycity you cant miss the title and they have a link
Reply
Old Aug 12, 2003 | 12:47 PM
  #6  
Attu's Avatar
Attu
Scooby Regular
 
Joined: May 2002
Posts: 1,385
Likes: 0
Post

Goto Start> Control Panel> Performance and maintenannce> Admin tools> Services .....click on messanger and choose the option "stop the service" .
That should stop all the pop ups.

Andy
Reply
Old Aug 12, 2003 | 12:59 PM
  #7  
Phil's Avatar
Phil
Track Day Organiser
 
Joined: Aug 2001
Posts: 23,377
Likes: 0
From: SX
Post

http://www.scoobycity.co.uk/modules....ewtopic&t=5419
Reply
Old Aug 12, 2003 | 01:40 PM
  #8  
Fulham71's Avatar
Fulham71
Scooby Regular
 
Joined: Jan 2002
Posts: 7,922
Likes: 0
Post

the link on there isnt working

http://microsoft.com/downloads
can anyone post the up to date link please ?
Reply
Old Aug 12, 2003 | 02:15 PM
  #9  
Phil's Avatar
Phil
Track Day Organiser
 
Joined: Aug 2001
Posts: 23,377
Likes: 0
From: SX
Post

I would assume if you just do a windows update that will pick up any outstanding updates

Mine auto updates when they are issued

phil
Reply
Old Aug 12, 2003 | 02:20 PM
  #10  
ianmiller999's Avatar
ianmiller999
Scooby Regular
 
Joined: Feb 2003
Posts: 1,285
Likes: 0
Post

Slight problem in the fact that it has found a floor with Microsoft Automatic Updates and stops that or something.
Reply
Old Aug 12, 2003 | 02:25 PM
  #11  
SiDHEaD's Avatar
SiDHEaD
Scooby Regular
 
Joined: Apr 2002
Posts: 9,196
Likes: 0
From: Birmingham
Post

Bit of info here

Andy
Reply
Old Aug 12, 2003 | 02:33 PM
  #12  
Pleo's Avatar
Pleo
Scooby Newbie
 
Joined: Aug 2003
Posts: 13
Likes: 0
Post

got norton anti-v on this my (this) fujitsu lap top but my wife's new NEC lap top running on XP has just been hit... [img]images/smilies/mad.gif[/img]
Reply
Old Aug 12, 2003 | 02:35 PM
  #13  
Pleo's Avatar
Pleo
Scooby Newbie
 
Joined: Aug 2003
Posts: 13
Likes: 0
Post

cat, same thing happened to me...this is my fujisu and is protected with norton anti-v and seems ok (lucky me)...

...but my wife's new NEC lap top has been hit [img]images/smilies/mad.gif[/img]
Reply
Old Aug 12, 2003 | 02:37 PM
  #14  
SiDHEaD's Avatar
SiDHEaD
Scooby Regular
 
Joined: Apr 2002
Posts: 9,196
Likes: 0
From: Birmingham
Post

Distinguishing Characteristics
Blaster is so simple that it doesn't even use e-mail to spread. The worm exploits the DCOM buffer overflow (described by Microsoft and our Information Alert) exclusively over TCP port 135 to gain full control of your Windows machine.

Once the worm has control of your machine, it uses the TFTP protocol to download a file called msblast.exe to your system and adds a registry entry to ensure that this executable starts every time you boot your computer. Msblast.exe, which is the worm itself, then starts scanning random IP addresses on TCP port 135 looking for more vulnerable systems to spread to.

That's it! The worm is very simple yet it still seems to be spreading quickly. At first glance, Blaster didn't seem to contain any malicious payload. However, the latest reports indicate that machines infected by the worm may attempt to syn flood Microsoft's "WindowsUpdate" site on August 16th. Since blaster exploits a buffer overflow flaw it could make an infected machine unstable and cause the machine to reboot.

Reply
Old Aug 12, 2003 | 11:22 PM
  #15  
PeteT's Avatar
PeteT
Scooby Regular
 
Joined: Jun 1999
Posts: 980
Likes: 0
Angry

Had this on mine, noticed it late last night, sorted it now (hopefully!) thanks to my sister who works in IT. Cheers Sis
Reply
Old Aug 12, 2003 | 11:25 PM
  #16  
LG John's Avatar
LG John
Scooby Regular
 
Joined: Mar 2002
Posts: 13,720
Likes: 0
From: Bradford
Post

I've got a thread in 'computer related' on this one and I had it and have cured it going on the advice contained therein
Reply
Old Aug 13, 2003 | 12:15 AM
  #17  
JackClark's Avatar
JackClark
Scooby Senior
25 Year Member
Liked
Loved
Community Favorite
 
Joined: Dec 2000
Posts: 20,896
Likes: 53
From: Overdosed on LCD
Post

I posted this on Monday.

Reply
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
Big RS Dave
ScoobyNet General
5
Apr 14, 2001 08:12 PM


Thread Tools
Search this Thread

All times are GMT +1. The time now is 12:00 PM.