PDA

View Full Version : Virus alert!



Duke John
08-13-2003, 19:14
Apperently there's a virus, called Blaster, roaming the internet. My computer was also affected and I did not open any suspicious attachments. This virus can enter your computer via isp port 135 (I really have no idea what that means...).

I don't know what it exactly did, but I read that hackers could control your computer, the only effect I noticed was that I was able to use my computer for a few minutes before I got a warning that it was shutting down in 60 seconds (I am honestly not joking).

Microsoft has a patch to avoid being infected and can be downloaded from their site. I seriously suggest you download it. I also read that august 16 all infected computers will activate the virus and attack the Windows Update site. Yes the same site where you can download the patch So download now before the site is down.

Download the patch here (http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp)

Does anybody know that wether the patch kills the virus. I know for certain that I had the virus, but I don't know if it's gone now...

Cheers, Duke John

The_Emperor
08-13-2003, 19:20
I have seen it, Been checking the levels of protection on our servers at work all day because of this.

You'll need to add a patch to your system if you have
Win NT
Win 2000
Win 2000 Server
Win 2003 Server
Win XP

From what I have heard Win ME and Win 98 don't have the critical flaw you describe. But they can still be infected.

Duke John
08-13-2003, 19:22
Yes, the internet providers have been very busy shutting down this virus, and I believe that they are almost done. But installing the patch wouldn't hurt.

Dimeola
08-14-2003, 00:19
The virus will infect your machine on its own, no assistance required on your part. It sets up a `shell` on your port and tries to spread itself. It also opens all your ports and causes the PC to reboot.
Several things:
In the Windows\system32 folder is a file named msblast.exe, there may be anohter support file and it can write commands to your registry which even if you delete the virus will cause the PC to download it again. SO, hit control-alt-delete to get a list of programs running. Look for msblast.exe and shut it down. Then update your virus DAT files. Go offline. Run a scan. Then run a search for `msblast.exe` to be sure you got all other files. Next in the run menu type regedit and call up the registry edit program. Do a search on msblast.exe.....delete the entry.
You should be fine.
McAfee, Norton and Symantec have excellent instructions as well as the Dell support site. ***Make sure you install the Windows security update or it can infect you again*** If you have a firewall put it back up immdeiately after you finisg playing MTW. http://www.totalwar.org/forum/non-cgi/emoticons/smile.gif
Good luck,
Dimeolas