PC Playground  

Go Back   PC Playground > General > Chat
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 08-12-2003, 09:07 PM
Senior Member
 
Join Date: Jan 2003
Location: Canada
Posts: 1,093
Send a message via ICQ to SniperX Send a message via AIM to SniperX Send a message via MSN to SniperX
Default Back after worm attack..

Have any of you been attacked by the world wide worm that spread like mad yesterday? Support forums are being flooded about it since it causes RPC to corrupt and do an auto shut down and it does it non stop... It effected me sadley.. but all is good now after microsoft released a patch which they never told us about. Lots of services are down now and websites are effected. But, i give the worm maker credit for typing this hidden string in the virus:

Quote:
The worm contains the following text, which is never displayed:

I just want to say LOVE YOU SAN!!
billy gates why do you make this possible ? Stop making money and fix your software!!
This worm is even on TV since it spread so fast world wide... seems like one of those code red alert things.
Reply With Quote
  #2 (permalink)  
Old 08-12-2003, 10:59 PM
Senior Member
 
Join Date: Jan 2003
Location: Springfield, VA/Denton, TX
Posts: 1,167
Send a message via AIM to drawback Send a message via MSN to drawback Send a message via Yahoo to drawback
Default

lol. very nice. i however am safe since i use a customized version of windows 98 :D
Reply With Quote
  #3 (permalink)  
Old 08-13-2003, 07:15 AM
Senior Member
 
Join Date: Feb 2003
Location: USA
Posts: 2,018
Send a message via AIM to zoid Send a message via MSN to zoid Send a message via Yahoo to zoid
Default

yeah I got it. i removed it. i dont have a firewall setup. i'm using windows xp without any service packs installed. i didnt have the latest windows updates even though i knew about the potential threats.

yeah that's about how it goes. I'm clean now and still not using SP1.


Edit: If you need to remove the virus, the link to the Blaster Removal Instructions is [url=http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html#removalinstructions:18jbnxlk ]here[/url:18jbnxlk] [Symantec.com]

It is highly reccomended that after you remove it, you install the updates from windows update. there should be a shortcut in your start menu, otherwise http://www.windowsupdate.com/ will redirect you to the windowsupdate service (use the link in your start menu just in case this link happens to be misspelled or modified)
Reply With Quote
  #4 (permalink)  
Old 08-13-2003, 07:24 AM
Senior Member
 
Join Date: Feb 2003
Location: USA
Posts: 2,018
Send a message via AIM to zoid Send a message via MSN to zoid Send a message via Yahoo to zoid
Default

I must give credit to the person(s) who created this worm, they did a fucking awesome job!

props on the DOS to microsoft, i just hope enough people still have it to attack billy's company. and the hidden code is sweet too.

I love how it spreads from computer to computer. The code is launched through an exploit of windows xp, which puts in a registry key that initiates the download of msblaster.exe which is obtained from previously infected machines. this then runs msblaster.exe and fucks things up.

i think of it like a friendly giant. everybody has it, it portrays an important message. it doesnt really hurt you but uses a loophole that could be used to hurt you (mad props).

anyway when I got it, this is what it looked like for me:

[img]http://zoid.pcplayground.com/random/howigotblaster/1.gif[/img]
svchost dies.


[img]http://zoid.pcplayground.com/random/howigotblaster/2.gif[/img]
msblaster.exe triggered, visible in the task manager, windows breaks, 60 seconds till restart.

...I knew about this worm and everything, a friend of mine even got it himself and successfully removed it. he claims that he sees several people on his buddy list appear, disappear, and reappear every 5 minutes or so.

High hopes that this will live till saturday, and that the assholes my friends and I know who deserve to get this among other virii.

remember this quote:
"The only difference between Windows and virii, is that virii rarely fail."
Reply With Quote
  #5 (permalink)  
Old 08-13-2003, 07:59 AM
Senior Member
 
Join Date: Feb 2003
Location: USA
Posts: 2,018
Send a message via AIM to zoid Send a message via MSN to zoid Send a message via Yahoo to zoid
Default

I hope this info I provided helps some of you to better understand the worm and to keep safe from it as well as other potential threats.


oh yeah and by the way, i had to recover by using my linux box to download the file from symantec and put it on a floppy disk.

Linux Crushes Windows.
Linux Owns All.
Reply With Quote
  #6 (permalink)  
Old 08-13-2003, 04:08 PM
Senior Member
 
Join Date: Jan 2003
Location: Springfield, VA/Denton, TX
Posts: 1,167
Send a message via AIM to drawback Send a message via MSN to drawback Send a message via Yahoo to drawback
Default

microsoft, windows, and bill gates are like testicals with elephantitis
the guy who wrote this kicks biblical donkey
windows is a virus
microsoft is a leech on society
microsoft programmers dont have enough talent to get jobs at mcdonalds
i have a rant i posted at projectrockstar.com forums(you have to register to view the forums. its a great game anyhow) im too lazy to copy it here, but anyone interested in reading it can head over there and register. get involved in the game. its pretty fun :D .

what the world needs is a true windows replacement...user friendly...solid coding...etc

thats all i have to say for right now
Reply With Quote
  #7 (permalink)  
Old 08-13-2003, 04:37 PM
Senior Member
 
Join Date: Jan 2003
Location: USA
Posts: 497
Default

Lol i use win98 also..
Reply With Quote
  #8 (permalink)  
Old 08-14-2003, 01:00 AM
Senior Member
 
Join Date: Jan 2003
Location: Canada
Posts: 1,093
Send a message via ICQ to SniperX Send a message via AIM to SniperX Send a message via MSN to SniperX
Default

Ya well, theres another planned attack saterday, it's going to shut down all microsoft services such as windows update, download servers,, pretty much all of microsoft.com, then infect computer users.
Reply With Quote
  #9 (permalink)  
Old 08-14-2003, 06:19 AM
Senior Member
 
Join Date: Feb 2003
Location: USA
Posts: 2,018
Send a message via AIM to zoid Send a message via MSN to zoid Send a message via Yahoo to zoid
Default

Really? Another attack? Will this affect me or just micro$hit?
Reply With Quote
  #10 (permalink)  
Old 08-14-2003, 08:37 AM
Senior Member
 
Join Date: Jan 2003
Location: Canada
Posts: 1,093
Send a message via ICQ to SniperX Send a message via AIM to SniperX Send a message via MSN to SniperX
Default

first microsoft then computer users :?
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 07:43 AM.