VIRUS !!!!!!!!!!!!!!!

dottie · 16 Aug 2003, 11:40

Thought I had better post this as a matter of urgency.

Virus notification as at 09.00am August 16th 2003

Anyone whose running Windows NT, Windows 2000 and Windows XP operating systems, please check you are running a Firewall. As this virus spreads from computer to computer.

Microsoft have a patch for this at:-

www.microsoft.com/security/incident/blast.asp

My own Yahoo e-mail was sent a virus over a period of 5 days, but thankfully that was sorted.

I recommend that you back up any important work, as a precaution.

I cannot emphasise strongly enough if you receive an e mail like I did with an unfamiliar name, address anything at all, that you don't recognise, DELETE IT!! Immediately!!!

plukie · 16 Aug 2003, 11:43

Thanks Dottie, this is a particularly nasty little bug(ger). It took my daughter 13 hours to get it off her computer.

Evan · 16 Aug 2003, 11:47

Can it effect Windows ME?

dottie · 16 Aug 2003, 11:49

Quote:

Originally Posted by Evan

Can it effect Windows ME?

Evan all I have in front of me regarding information of systems that could be affected are the above, I would recommend that you go to the site above and read through the information there.

Evan · 16 Aug 2003, 11:52

Thanks Dottie!

dottie · 16 Aug 2003, 11:56

Quote:

Originally Posted by plukie

Thanks Dottie, this is a particularly nasty little bug(ger). It took my daughter 13 hours to get it off her computer.

I know what a virus can do to a computer, someone sent me a happy 99 virus a couple of years ago,and I being a novice opened it and it infected every programme on my computer.. Luckily enough we have a friend who is a computer expert and he sorted it for me, as at this time also.

Shadows On The Wall · 16 Aug 2003, 12:12

Well i got story bout that. as u know it was my birthday on the 12th, well i spent all day attempting to remove that ~~~~~~. my friend also had it, so i had great trouble d/l the patch, but a finally did it and im back here , yes!

wounder if meat had the virus since hes always on the net.

kinda my own fault i got it, i never use anti virus software slkows the com down to much, its a risk u gotaa take lol

dottie · 16 Aug 2003, 12:19

Shadow I know my computer is running quite slowly this morning. but its better to be safe than sorry.

Microsoft actually closed the affected site at midnight, but some people are still having problems downloading the patch, and according to Sky news they state that the problem is is far from over!!!!

SO BEWARE!!!!

cerysmeatloaf · 16 Aug 2003, 13:39

thanks dottie
but i read this too late i have it but luky its gone now

Bigmomma · 16 Aug 2003, 15:42

hmmm...
this isnt Bigmomma.its actually her husband,have just been resetting some internet settings and checking that her files and settings are ok..

Now for this virus...nasty yes...

If you have the blaster virus then ur pc will constantly reboot saying

Windows must now restart because the Remote Procedure Call terminated unexpectedly

then u have 60 seconds...

Windows 2000 users won't see the timer. However, they might see other effects from the RPC exploit. Such as:

1. Problems when creating email messages at least in Outlook and Outlook Express
2. Visual problems with Control panel
3. Add/Remove Programs does not work
4. Drag & Drop function does not work
5. Copy / Paste function does not work
6. some executables don't work
7. Problems with javascript
8. Some programs won't Save at all

The worm also attempts to perform a Denial of Service (DoS) on the Microsoft Windows Update Web server (windowsupdate.com). This is an attempt to prevent you from applying a patch on your computer against the DCOM RPC vulnerability.(very sneaky!)

It is fairly easy to remove,just goto http://securityresponse.symantec.com...oval.tool.html

**NOTE** if you have system restore running then the removal wont work as this backs up your files,so you need to disable system restore first..

Its spread is easing now,or so it seems,but it is one nasty piece of work,and spreads by scanning networks for vulnerable hosts,so you could be infecting many other pcs without even realising it

Because of the way the worm works, it may be difficult to connect to the Internet to obtain the patch, definitions, or removal tool before the worm shuts down the computer. It has been reported that, for users of Windows XP, activating the Windows XP firewall may allow you to download and install the patch, obtain virus definitions, and run the removal tool. This may also work with other firewalls, although this has not been confirmed.

dottie · 16 Aug 2003, 15:45

Thanks bigmommas husband for the detailed info, I only knew what I'd seen on the Microsoft site, and Sky News.

Tim · 16 Aug 2003, 15:49

Mmm, that is nice again. Wonder who makes this kind of thinks. I mean... what is the purpose of it???

But anyway, thank you very much.

Rob The Badger · 16 Aug 2003, 16:40

This particular strike is aimed primarily at Microsoft. It appears.

R. · 16 Aug 2003, 21:35

That worm exploits a secutity flaw which was announced by Microsoft exactly 1 month ago.The patch is available since that time too.
Windows XP users may stop the system shutdown by openening a command window and entering 'shutdown -a' <ENTER>.
This will abort system shutdown.

Chris · 16 Aug 2003, 22:49

I am now clean.

Anyone running dual boot XP systems, if you can get a partition running ME or 98 youc an clear the virus out from there!

Tim, Viruses are created by dysfunctional anti-socail idiots with no lives or girlfriends who have too much time on their hands!!!! Personally I feel castration is too good for them!!!!!

Don't know about anyone else but I seem to be getting a lot more viruses just of late. I ahve a firewall and Norton AV software working flat out!!! Most of them seem to be propagating through Yahoo!! If anyone has my Yahoo email address, I am dropping it now, please use yoboglad@hotmail.com instead.

tukayaway · 17 Aug 2003, 01:32

Am I the only one who has fixed it by themselves? Just by using the help files, it told me how to stop it closing the system down.

I think there has been too much hype about this. Its scaring people when they dont have to.

shadow1000001 · 17 Aug 2003, 05:35

Quote:

Originally Posted by Evan

Can it effect Windows ME?

It isn't supposed to affect Windows Me

Maria

dottie · 17 Aug 2003, 11:38

Quote:

Originally Posted by Chris

I am now clean.

Anyone running dual boot XP systems, if you can get a partition running ME or 98 youc an clear the virus out from there!

Tim, Viruses are created by dysfunctional anti-socail idiots with no lives or girlfriends who have too much time on their hands!!!! Personally I feel castration is too good for them!!!!!

Don't know about anyone else but I seem to be getting a lot more viruses just of late. I ahve a firewall and Norton AV software working flat out!!! Most of them seem to be propagating through Yahoo!! If anyone has my Yahoo email address, I am dropping it now, please use yoboglad@hotmail.com instead.

Chris my virus was sent through Yahoo too, but luckily enough I was able to get Yahoo to dispose of it for me. Do you think perhaps I should change my e mail address? Although its been clear now for 4 days :)

Chris · 17 Aug 2003, 18:41

No dottie, think you should be alright.

Some "little angel" has appeared to have put me onto some sort of mailing list. I am getting on average 4 virus attempts a week from Yahoo. By changing ym email addy,l I shoudl eb able to get off the list!!!!

R. · 17 Aug 2003, 18:45

Quote:

Originally Posted by tukayaway

I think there has been too much hype about this. Its scaring people when they dont have to.

This security hole in all Windows NT based systems is by far the worst so far.
If you run an unpatched system and if you don't have a proper configured firewall, your computer is open like a smashed window.

dottie · 18 Aug 2003, 18:10

Quote:

Originally Posted by R.

Quote:

Originally Posted by tukayaway

I think there has been too much hype about this. Its scaring people when they dont have to.

This security hole in all Windows NT based systems is by far the worst so far.
If you run an unpatched system and if you don't have a proper configured firewall, your computer is open like a smashed window.

Thanks R. for your input, I trust this will be noticed now, and people will realise I'm not scare mongering. I was one of the unlucky persons and it has made me exceptionally virus safety concious now. Thanks R. :)

Shadows On The Wall · 20 Aug 2003, 16:29

well im all fixed, wish every1 same luck

Michel · 21 Aug 2003, 08:04

I've had the virus. I had another trick to stop the system shut down. But the trick of R. is much easier. Stupid virus, but now I'm clean. No virus can catch me now.

dottie · 21 Aug 2003, 11:12

Its back!!!! twice in my e-mail this morning - just deleted straight away, but I cann't forward it to abuse@yahoo this time, without opening it!!

I don't know how its getting past our security

Any suggestions would be gratefully received, do I just keep deleting it ?

Have now managed to inform Yahoo without it being sent back again - I just wait with bated breath

I'm even getting worried now that Windows updates are appearing, and I don't know whether they are legal or not, hate these mind games

Puritan · 21 Aug 2003, 14:10

It's like a sort of war out there - continuous attacks. Twice to my web site email address in the twenty minutes I've been on line!!

You've just got to be so careful at the moment

16 Aug 2003, 11:40	#1
dottie queen post- whore extraordinaire Join Date: 29.01.2003 Location: Still Rockin' at "72" Posts: 13,181	VIRUS !!!!!!!!!!!!!!! Thought I had better post this as a matter of urgency. Virus notification as at 09.00am August 16th 2003 Anyone whose running Windows NT, Windows 2000 and Windows XP operating systems, please check you are running a Firewall. As this virus spreads from computer to computer. Microsoft have a patch for this at:- www.microsoft.com/security/incident/blast.asp My own Yahoo e-mail was sent a virus over a period of 5 days, but thankfully that was sorted. I recommend that you back up any important work, as a precaution. I cannot emphasise strongly enough if you receive an e mail like I did with an unfamiliar name, address anything at all, that you don't recognise, DELETE IT!! Immediately!!!

16 Aug 2003, 11:43	#2
plukie Senior Loafer Join Date: 18.07.2003 Location: Plymouth, Devon Posts: 199	Thanks Dottie, this is a particularly nasty little bug(ger). It took my daughter 13 hours to get it off her computer.

16 Aug 2003, 11:47	#3
Evan Super Loafer Join Date: 03.07.2003 Location: Florida, USA Posts: 216	Can it effect Windows ME?

16 Aug 2003, 11:52	#5
Evan Super Loafer Join Date: 03.07.2003 Location: Florida, USA Posts: 216	Thanks Dottie!

16 Aug 2003, 12:12	#7
Shadows On The Wall Super Loafer Join Date: 17.03.2003 Location: Wales Posts: 278	Well i got story bout that. as u know it was my birthday on the 12th, well i spent all day attempting to remove that ~~~~~~. my friend also had it, so i had great trouble d/l the patch, but a finally did it and im back here , yes! wounder if meat had the virus since hes always on the net. kinda my own fault i got it, i never use anti virus software slkows the com down to much, its a risk u gotaa take lol

16 Aug 2003, 12:19	#8
dottie queen post- whore extraordinaire Join Date: 29.01.2003 Location: Still Rockin' at "72" Posts: 13,181	Shadow I know my computer is running quite slowly this morning. but its better to be safe than sorry. Microsoft actually closed the affected site at midnight, but some people are still having problems downloading the patch, and according to Sky news they state that the problem is is far from over!!!! SO BEWARE!!!!

16 Aug 2003, 13:39	#9
cerysmeatloaf Super Loafer Join Date: 20.04.2003 Location: south wales uk Posts: 454	thanks dottie but i read this too late i have it but luky its gone now

16 Aug 2003, 15:42	#10
Bigmomma Super Loafer Join Date: 07.07.2003 Location: Somewhere in time in my mind......... Posts: 655	hmmm... this isnt Bigmomma.its actually her husband,have just been resetting some internet settings and checking that her files and settings are ok.. Now for this virus...nasty yes... If you have the blaster virus then ur pc will constantly reboot saying Windows must now restart because the Remote Procedure Call terminated unexpectedly then u have 60 seconds... Windows 2000 users won't see the timer. However, they might see other effects from the RPC exploit. Such as: 1. Problems when creating email messages at least in Outlook and Outlook Express 2. Visual problems with Control panel 3. Add/Remove Programs does not work 4. Drag & Drop function does not work 5. Copy / Paste function does not work 6. some executables don't work 7. Problems with javascript 8. Some programs won't Save at all The worm also attempts to perform a Denial of Service (DoS) on the Microsoft Windows Update Web server (windowsupdate.com). This is an attempt to prevent you from applying a patch on your computer against the DCOM RPC vulnerability.(very sneaky!) It is fairly easy to remove,just goto http://securityresponse.symantec.com...oval.tool.html NOTE if you have system restore running then the removal wont work as this backs up your files,so you need to disable system restore first.. Its spread is easing now,or so it seems,but it is one nasty piece of work,and spreads by scanning networks for vulnerable hosts,so you could be infecting many other pcs without even realising it Because of the way the worm works, it may be difficult to connect to the Internet to obtain the patch, definitions, or removal tool before the worm shuts down the computer. It has been reported that, for users of Windows XP, activating the Windows XP firewall may allow you to download and install the patch, obtain virus definitions, and run the removal tool. This may also work with other firewalls, although this has not been confirmed.

16 Aug 2003, 15:45	#11
dottie queen post- whore extraordinaire Join Date: 29.01.2003 Location: Still Rockin' at "72" Posts: 13,181	Thanks bigmommas husband for the detailed info, I only knew what I'd seen on the Microsoft site, and Sky News.

16 Aug 2003, 15:49	#12
Tim The Butcher Join Date: 14.04.2002 Location: Westervoort, The Netherlands Posts: 10,321	Mmm, that is nice again. Wonder who makes this kind of thinks. I mean... what is the purpose of it??? But anyway, thank you very much.

16 Aug 2003, 16:40	#13
Rob The Badger Too sexy for this post Join Date: 14.04.2002 Location: Manchester, UK Posts: 2,895	This particular strike is aimed primarily at Microsoft. It appears.

16 Aug 2003, 21:35	#14
R. You dig. Join Date: 02.04.2002 Location: On the fothermucker Posts: 7,179	That worm exploits a secutity flaw which was announced by Microsoft exactly 1 month ago.The patch is available since that time too. Windows XP users may stop the system shutdown by openening a command window and entering 'shutdown -a' <ENTER>. This will abort system shutdown.

16 Aug 2003, 22:49	#15
Chris Mega Loafer Join Date: 14.04.2002 Location: Somewhere in the real world. Posts: 7,527	I am now clean. Anyone running dual boot XP systems, if you can get a partition running ME or 98 youc an clear the virus out from there! Tim, Viruses are created by dysfunctional anti-socail idiots with no lives or girlfriends who have too much time on their hands!!!! Personally I feel castration is too good for them!!!!! Don't know about anyone else but I seem to be getting a lot more viruses just of late. I ahve a firewall and Norton AV software working flat out!!! Most of them seem to be propagating through Yahoo!! If anyone has my Yahoo email address, I am dropping it now, please use yoboglad@hotmail.com instead.

17 Aug 2003, 01:32	#16
tukayaway Super Loafer Join Date: 12.05.2002 Location: Luton, England Posts: 485	Am I the only one who has fixed it by themselves? Just by using the help files, it told me how to stop it closing the system down. I think there has been too much hype about this. Its scaring people when they dont have to.

17 Aug 2003, 18:41	#19
Chris Mega Loafer Join Date: 14.04.2002 Location: Somewhere in the real world. Posts: 7,527	No dottie, think you should be alright. Some "little angel" has appeared to have put me onto some sort of mailing list. I am getting on average 4 virus attempts a week from Yahoo. By changing ym email addy,l I shoudl eb able to get off the list!!!!

20 Aug 2003, 16:29	#22
Shadows On The Wall Super Loafer Join Date: 17.03.2003 Location: Wales Posts: 278	well im all fixed, wish every1 same luck

21 Aug 2003, 08:04	#23
Michel Mega Loafer Join Date: 14.04.2002 Location: Stadskanaal, The Netherlands Posts: 1,631	I've had the virus. I had another trick to stop the system shut down. But the trick of R. is much easier. Stupid virus, but now I'm clean. No virus can catch me now.

21 Aug 2003, 11:12	#24
dottie queen post- whore extraordinaire Join Date: 29.01.2003 Location: Still Rockin' at "72" Posts: 13,181	Its back!!!! twice in my e-mail this morning - just deleted straight away, but I cann't forward it to abuse@yahoo this time, without opening it!! I don't know how its getting past our security Any suggestions would be gratefully received, do I just keep deleting it ? Have now managed to inform Yahoo without it being sent back again - I just wait with bated breath I'm even getting worried now that Windows updates are appearing, and I don't know whether they are legal or not, hate these mind games

21 Aug 2003, 14:10	#25
Puritan Super Loafer Join Date: 14.04.2002 Location: Banbury, United Kingdom Posts: 350	It's like a sort of war out there - continuous attacks. Twice to my web site email address in the twenty minutes I've been on line!! You've just got to be so careful at the moment