1. Welcome! Please take a few seconds to create your free account to post threads, make some friends, remove a few ads while surfing and much more. ClutchFans has been bringing fans together to talk Houston Sports since 1996. Join us!

New Virus "Blaster Worm" - Beware!

Discussion in 'BBS Hangout' started by Sonny, Aug 12, 2003.

  1. Sonny

    Sonny Member

    Joined:
    Mar 20, 2001
    Messages:
    5,436
    Likes Received:
    8
    You could just try to reinstall windows in a new folder

    instead of c:\windows do c:\windowsxp

    or something like that, this way you can keep your data...?

    Or you could install windows on top of the existing installation also.
     
  2. Dr of Dunk

    Dr of Dunk Clutch Crew

    Joined:
    Aug 27, 1999
    Messages:
    46,633
    Likes Received:
    33,635
    If you haven't started formatting yet, what happens when you go back to Control Panel -> Administrative Tools -> Services -> double-click on the Remote Procedure Call entry?
     
  3. Rockets2K

    Rockets2K Clutch Crew

    Joined:
    Mar 22, 2000
    Messages:
    18,050
    Likes Received:
    1,271
    I havent tried that Sonny...but doesnt Xp warn during installation that it will overwrite the Documents and Settings folders?

    In my support capacity, we normally dont do a standing reinstall, we hookup the drive and ghost it, then reimage it and transfer over any relevant files from the old image.

    Do yall use a similar procedure?

    btw...any openings over there? this intern stuff sucks.:(
     
  4. Sonny

    Sonny Member

    Joined:
    Mar 20, 2001
    Messages:
    5,436
    Likes Received:
    8
    Truthfully I'm not into desktop support that much anymore. This is just from personal experience.

    I think you may be right about the Docs&Settings folders getting overwritten... Although I was ok the last time I did mine.

    no openings, they are too busy doing closings, if you know what I mean...
     
  5. ima_drummer2k

    ima_drummer2k Member

    Joined:
    Oct 18, 2002
    Messages:
    36,414
    Likes Received:
    9,359
    Sonny, you are The Man.

    I got this worm 2 nights ago and I've been dreading even trying to fix it since then seeing as I'm a complete moron when it comes to things like this. I tried this link and the problem was solved in just a few minutes. No waiting on perma-hold with my internet provider etc. Thanks again.

    For those as stupid as me, this is all I did:

    Took SaFe's advice below.

    1. Go to control panel
    2. Administrative tools
    3. Services
    4. Go down and double click Remote Procedure Call
    5. go to recovery, third tab.
    6. Change all the failure to just ignore instead of restarting computer.

    Then get online and click on Sonny's link. It only takes a few minutes. As soon as you're done (I think this is the key), go back and change all the failure back to restart. Then restart your computer just to be safe.

    Problem solved. At least in my case. :) Yet another reason this bbs kicks oh so much arse.
     
  6. SmeggySmeg

    SmeggySmeg Member

    Joined:
    Feb 23, 1999
    Messages:
    14,887
    Likes Received:
    123
    Sonny,

    spent the day saving my work laptop, the anti-virus quarentined it luckily but the person who had the machine had never added any patches orservice packs (just got it this week) so spent the day updating it.

    now to my home computer, not sure if i had it or not but added the XP patch and also ran the symantec fixer tool and it found nothing. but now my internet connection is screwed, the modem seems to be working fine but the computer isn't connecting to it, can't even go the admin screen for the modem??? is there any chance they are related??

    Smeg
     
  7. Dr of Dunk

    Dr of Dunk Clutch Crew

    Joined:
    Aug 27, 1999
    Messages:
    46,633
    Likes Received:
    33,635
    Uh Smeg, you do know the "fixer tool" is for fixing the problem you said you may not have right? :) It's probably a good idea to make sure you have the problem before you try to fix it. :D

    Also, Sonny said he had heard of issues with the Symantec tool and to try the Sophos tool.
     
  8. SmeggySmeg

    SmeggySmeg Member

    Joined:
    Feb 23, 1999
    Messages:
    14,887
    Likes Received:
    123
    yeah i know at that stage wasn't sure if i had it or not.

    will download the sophos tool and take it home.
     
  9. LonghornFan

    LonghornFan Member

    Joined:
    Sep 16, 2002
    Messages:
    15,718
    Likes Received:
    2,628
    It won't respond when double clicking. I haven't done anything to the PC yet, but will be doing a fresh re-install of the system tomorrow. I saved a lot to Norton Ghost a couple of months back, just wish I would have done this weekly like I had originaly planned.

    I don't know what I did, but I completely shut down the whole system.
     
  10. Panda

    Panda Member

    Joined:
    Jun 5, 2002
    Messages:
    4,130
    Likes Received:
    1
    My computer got screwed by this b**** yesterday. I just got it running again. This thing is nasty. What it does to my computer is not just shutting it down once logged on, but also cripple everything I tried to run to a halt. It also disables the search function of the windows. So I took the dumb way, installed a second operating system, got it back up on the internet searching for help, and got hit by the bug within minutes once again. Lucky me, this time it just shut down the PC without crippling it. I realized this bug is actively seeking victims on the net. So I restarted the computer, installed a firewall, went on the internet, and the firewall told me that msblast.exe is trying to access the internet and it's located in the windows/system32. By now I heard of this bug from the TV. I deleted it and erased its registry entry, which is the same routine listed by other posters. Then I went on the net, got the fix patch from the Microsoft site . Whew, after hours of sweating and tormenting, everything is back to normal. Only my old OS is gone, I don't know if it's still infected, or it's been messed up by the bug. I'm gonna try to fix it later. For an average computer user I consider myself did an OK job. Now knowledge gained from the hard lesson.

    1. Only antivirus software isn't enough, personal firewall is a must. I have Norton running all the time and it detected the virus but it doesn't prevent the computer from being reinfected and shut down as long as the computer is on the internet. I made a big mistake by disabling Norton auto protection while logging on, in the hope of trying out other antivirus software. That's how the virus got into my PC. :(

    2. Different from what I thought, viruses don't just wait for you to download. They also goes out, propagate themselves on the net like predators!

    3. Windows sucks! It should come with a firewall and Microsoft should release the original code! How can a little program as small as 7K enter my computer like it is its backyard??!!
     
  11. YoYao

    YoYao Member

    Joined:
    May 22, 2003
    Messages:
    662
    Likes Received:
    8
    just format my laptop, glad I don't have much data there.
     
  12. Dr of Dunk

    Dr of Dunk Clutch Crew

    Joined:
    Aug 27, 1999
    Messages:
    46,633
    Likes Received:
    33,635
    I know Microsoft is getting screwed over for this, but in their defense, the patch for some of this has been out for almost a month. If users don't update their OS, what's MS supposed to do? Come to your door and force you to do it? In XP and 2000 they even put a little icon in the Start button that lets you update. You select it, then it goes and finds anything new you need. You then tell it to install those things. Pretty simple. Saves time and effort.

    By the way, one of the first rules of security is that if you are on a network, you are not safe, nor should you ever assume you're 100% safe. I don't care what OS you use.

    BTW, if you're using Windows XP, technically it does come with a firewall. I'd still use another one because everybody's going to go after Microsoft's implementation first. Why? Because they're the biggest name and you get the biggest notoriety and impact for doing it.
     
  13. Rockets2K

    Rockets2K Clutch Crew

    Joined:
    Mar 22, 2000
    Messages:
    18,050
    Likes Received:
    1,271
    Funny thing is, if we had the ability builtin to disable ports selectively in Windows...being infected would be easy to stop once word got out...just block activity on port 135


    DoD, have you checked your hardware firewall logs?
    I am not showing any hits at all on the port that it is supposed to use..

    how weird is that?
     
  14. Sonny

    Sonny Member

    Joined:
    Mar 20, 2001
    Messages:
    5,436
    Likes Received:
    8
    Man, sorry I didn't get back to this faster. Shoot me an email and we can talk if you are still having issues.
     
  15. Rip Van Rocket

    Rip Van Rocket Contributing Member

    Joined:
    May 20, 2002
    Messages:
    7,152
    Likes Received:
    356
    READ THIS if you are having difficulty with your computer re-booting before you have a chance to remove the blaster worm.
     
  16. Rockets2K

    Rockets2K Clutch Crew

    Joined:
    Mar 22, 2000
    Messages:
    18,050
    Likes Received:
    1,271
    http://www.enterpriseitplanet.com/security/news/article.php/3064211


    get those patches in place people...this isnt over yet.
     
  17. Lil Pun

    Lil Pun Member

    Joined:
    Oct 6, 1999
    Messages:
    34,143
    Likes Received:
    1,038
    Can somebody explain to me the difference between a worm and virus? Isn't there something else similar to those also?
     
  18. Lil Pun

    Lil Pun Member

    Joined:
    Oct 6, 1999
    Messages:
    34,143
    Likes Received:
    1,038
    Trojan was the other thing I was thinking of.
     
  19. Rockets2K

    Rockets2K Clutch Crew

    Joined:
    Mar 22, 2000
    Messages:
    18,050
    Likes Received:
    1,271
     
  20. bobrek

    bobrek Politics belong in the D & D

    Joined:
    Sep 16, 1999
    Messages:
    36,288
    Likes Received:
    26,645
    Essentially you have to do something proactive to inflict a virus upon your computer (e.g. opening an infected email attachment).

    A worm can inflict itself upon your computer without you doing anything.

    Both can wreak havoc.
     

Share This Page