Home  |  Forums  |  914 Info  |  Blogs
 
914World.com - The fastest growing online 914 community!
 
Porsche, and the Porsche crest are registered trademarks of Dr. Ing. h.c. F. Porsche AG. This site is not affiliated with Porsche in any way.
Its only purpose is to provide an online forum for car enthusiasts. All other trademarks are property of their respective owners.
 

Welcome Guest ( Log In | Register )

> The Blaster Worm - Read This, affects XP, 2000 and NT Windows systems
tryan
post Aug 13 2003, 01:06 PM
Post #1


Senior Member
***

Group: Members
Posts: 553
Joined: 22-January 03
From: smokey mountains gatlinburg tn
Member No.: 184
the worm is suppose to make all infected computers log onto windows update on the 16th. download the service pack today !!
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
2 Pages V  1 2 >  
 Reply to this topicStart new topic
Replies(1 - 19)
reverie
post Aug 13 2003, 05:53 PM
Post #2


Senior Member
***

Group: Members
Posts: 783
Joined: 14-March 03
Member No.: 427
Region Association: None
I downloaded the latest service packs today, but it didn't seem to help.. my computer would still shut down every few minutes, dang it.. so I went to microsoft.com, and managed to download the patch for the Blaster worm before my computer shut down, and that solved the problem.

Hey, 10 posts!.. woot!
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Bleyseng
post Aug 13 2003, 06:34 PM
Post #3


Aircooled Baby!
**********

Group: Members
Posts: 13,035
Joined: 27-December 02
From: Seattle, Washington (for now)
Member No.: 24
Region Association: Pacific Northwest
Reverie, are you coming to the swap meet or to the flair party on Saturday?
I don't know if I have met you yet.

Geoff
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
reverie
post Aug 13 2003, 07:52 PM
Post #4


Senior Member
***

Group: Members
Posts: 783
Joined: 14-March 03
Member No.: 427
Region Association: None
I want to attend John Walker's event, and I want to stop in at Dave's event also, but can't shay for shure... My girlfriend and I are moving on the 19th (one whole mile! lol) and there's lots of packing and "newfound garbage" to haul away. I think she'll understand that I really want to have a few hours to meet new buds, but I'll have to work my butt off to earn it... I'm spit-shining my 'teen already. ~ Roger

Is this thread officially hijacked yet?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Curvie Roadlover
post Aug 13 2003, 09:51 PM
Post #5


Two trunks are better than one!
****

Group: Members
Posts: 2,025
Joined: 29-December 02
From: Southeast Michigan
Member No.: 42
I run Windows Millenium Edition. I don't see a patch for that system. Is ME unaffected by the worm, and that's why there's no ME specific patch? (IMG:style_emoticons/default/confused24.gif)
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
redshift
post Aug 13 2003, 09:55 PM
Post #6


Bless the Hell out of you!
**********

Group: Members
Posts: 10,926
Joined: 29-June 03
Member No.: 869
Yeah Curvie, only NT based.

I run a superhacked version of 98SE... rock!



M
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Curvie Roadlover
post Aug 13 2003, 10:18 PM
Post #7


Two trunks are better than one!
****

Group: Members
Posts: 2,025
Joined: 29-December 02
From: Southeast Michigan
Member No.: 42
Cool,
Thanks, redshift
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Lawrence
post Aug 14 2003, 08:45 AM
Post #8


Senior Member
***

Group: Benefactors
Posts: 1,661
Joined: 5-February 03
Member No.: 244
Region Association: None
CNN News Article on the Worm

Blaster Worm Removal Tool Symantec Removal Tool

The Microsoft Patch to prevent this worm is located *here* on their TechNet Site. It's NOT available through Windows Update. If you haven't installed the patch, you are NOT safe.

P.S. This worm does not affect Windows ME users, only NT generation platforms. "ME" is simply Windows 98 on steroids.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
ArtechnikA
post Aug 14 2003, 11:05 AM
Post #9


rich herzog
*****

Group: Members
Posts: 7,390
Joined: 4-April 03
From: Salted Roads, PA
Member No.: 513
Region Association: None
QUOTE(Lawrence @ Aug 14 2003, 06:45 AM)
The Microsoft Patch to prevent this worm is located *here* on their TechNet Site. It's NOT available through Windows Update. If you haven't installed the patch, you are NOT safe.

let me make sure i understand what you're saying -- both my XP systems have auto-installed all the security updates from mid-April and you're saying they are *not* safe ? that Microsoft has known about this and yet KEPT IT OFF the update site ? i suppose that's possible but color me skeptical...

i have yet to see anyone say how you can tell if your system is or is not affected...
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
airsix
post Aug 14 2003, 11:08 AM
Post #10


I have bees in my epiglotis
****

Group: Members
Posts: 2,196
Joined: 7-February 03
From: Kennewick Man (E. WA State)
Member No.: 266
QUOTE(ArtechnikA @ Aug 14 2003, 09:05 AM)
i have yet to see anyone say how you can tell if your system is or is not affected...

If infected your pc will reboot every 60 seconds. Note that this is almost twice as often as normal.

-Ben M. (safely behind my Linux firewall last rebooted 9 months ago)
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
ArtechnikA
post Aug 14 2003, 11:08 AM
Post #11


rich herzog
*****

Group: Members
Posts: 7,390
Joined: 4-April 03
From: Salted Roads, PA
Member No.: 513
Region Association: None
QUOTE(Lawrence @ Aug 14 2003, 06:45 AM)
The Microsoft Patch to prevent this worm is located *here* on their TechNet Site. It's NOT available through Windows Update. If you haven't installed the patch, you are NOT safe.

and Oh By The Way - you've gotta be running INTERNET EXPLORER to install that patch.
conspiracy theorists are surely having a field day...
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Lawrence
post Aug 14 2003, 11:13 AM
Post #12


Senior Member
***

Group: Benefactors
Posts: 1,661
Joined: 5-February 03
Member No.: 244
Region Association: None
QUOTE
i have yet to see anyone say how you can tell if your system is or is not affected...


Other than the tell-tale rebooting, the Symantec Tool I posted above will search your system for the Worm.

Microsoft says that you can consider yourself safe if you've been using the Firewall integrated into XP "Network Connections". But they highly advise that you install the patch anyways.

I dunno about HAVING to run Explorer. I do, because I like it. I downloaded the patch and installed it from my desktop.

-Rusty (IMG:style_emoticons/default/smoke.gif)
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
ArtechnikA
post Aug 14 2003, 11:17 AM
Post #13


rich herzog
*****

Group: Members
Posts: 7,390
Joined: 4-April 03
From: Salted Roads, PA
Member No.: 513
Region Association: None
QUOTE(Lawrence @ Aug 14 2003, 09:13 AM)
Microsoft says that you can consider yourself safe if you've been using the Firewall integrated into XP "Network Connections". But they highly advise that you install the patch anyways.

I dunno about HAVING to run Explorer...

i went there, it looked for updates, it told me there was nothing to do. i'm pretty sure that update got installed in July when the issue was originally raised.

as for requiring IE - believe it. went there with Mozilla Firebird and all it it told me was where to where to install a copy of IE...
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
SirAndy
post Aug 14 2003, 02:17 PM
Post #14


Resident German
*************************

Group: Admin
Posts: 41,669
Joined: 21-January 03
From: Oakland, Kalifornia
Member No.: 179
Region Association: Northern California
QUOTE(ArtechnikA @ Aug 14 2003, 10:17 AM)
as for requiring IE - believe it. went there with Mozilla Firebird and all it it told me was where to where to install a copy of IE...

yepp, the only "critical" update i see is IE6 (IMG:style_emoticons/default/cool.gif)
Andy
User is online!Profile CardPM
Go to the top of the page
+Quote Post
Brad Roberts
post Aug 14 2003, 05:08 PM
Post #15


914 Freak!
***************

Group: Members
Posts: 19,148
Joined: 23-December 02
Member No.: 8
Region Association: None
The worm is attacking the update pages...

Go to the Microsoft website HERE *********************

They have a link from there.


B
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
URY914
post Aug 14 2003, 06:43 PM
Post #16


I built the lightest 914 in the history of mankind.
****************************************************************************************************

Group: Members
Posts: 120,904
Joined: 3-February 03
From: Jacksonville, FL
Member No.: 222
Region Association: None
My work 'puter has been down since Monday noon. I've tried everything, (downloads, virus scans, etc, etc, ) with NO luck. I'm ready to use it as a wheel chock. (IMG:style_emoticons/default/headbang.gif)

I can find the blaster file, delete it and it comes right back. (IMG:style_emoticons/default/confused24.gif)

It really cuts down on posting here during the day.

Paul
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
kafermeister
post Aug 14 2003, 07:22 PM
Post #17


Senior Member
***

Group: Members
Posts: 778
Joined: 20-January 03
From: Cincinnati/Northern KY
Member No.: 174
QUOTE(URY914 @ Aug 14 2003, 08:43 PM)
My work 'puter has been down since Monday noon. I've tried everything, (downloads, virus scans, etc, etc, ) with NO luck. I'm ready to use it as a wheel chock. (IMG:style_emoticons/default/headbang.gif)

I can find the blaster file, delete it and it comes right back. (IMG:style_emoticons/default/confused24.gif)

It really cuts down on posting here during the day.

Paul

One of the guys at work says he's been installing AdAware to clean it off and that it's been working. (IMG:style_emoticons/default/blink.gif)

Looks for instances of blaster.exe in your task list. You probably won't be able to stop the processes manually. I'm running Win98se and Linux so I haven't been affected by this particular pest.

Rick
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
URY914
post Aug 14 2003, 07:29 PM
Post #18


I built the lightest 914 in the history of mankind.
****************************************************************************************************

Group: Members
Posts: 120,904
Joined: 3-February 03
From: Jacksonville, FL
Member No.: 222
Region Association: None
I've got XP at work and good 'ol '98 here at home.
Thanks for the advice.

Paul
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
shoguneagle
post Aug 14 2003, 08:15 PM
Post #19


shoguneagle
***

Group: Members
Posts: 1,180
Joined: 3-January 03
From: CA, OR, AZ (CAZOR); New Mexico
Member No.: 84
Region Association: Northern California
I had the worm on my EP Box; i went to MS and got the patch; I again went to MS and downloaded the service patches (I am setup for auto updating) and noticed I had an occassional glitch. Oh, before doing the foregoing, I activated MS firewall which did give me back the internet connection. If you cannot get an internet connection you have to go into the RPC (Remote Procedure Calls,; do not confuse with Remote Procedure Call Locator whiich is right below it; not the same). The worm is still on the computer files and you have to get the tool from Symantec.

Please refer to Mr. Lawrence's info in this thread. That is where I got my "worm fix" after getting the MS change.

I am back up running EP without any glitches from "The Blaster"

If anyone wants a run down on the Symantec routine, I give them what I did.

It looks like the tool has to be gotten to get the virous out of your system; the MS patch does not appear to to this.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Pnambic
post Aug 14 2003, 08:47 PM
Post #20


Honk if you like obscene gestures!
***

Group: Members
Posts: 914
Joined: 9-April 03
From: Atlanta, GA
Member No.: 546
Region Association: South East States
As I understand it, the Microsoft patch is exactly what it is named....a patch. It patches the particular security flaw that allows the computer to be infiltrated by this particular virus. It does not remove the virus if the computer has already been infected. In order to remove the virus, you need to download the Blaster.Virus.Removal Tool from Symantec.

Analogy:
Someone breaks into your house because your front door was unlocked. Locking the front door might keep anyone else from getting in, but the guy that already broke in is still there packing away your good silverware. Locking the door is Microsoft's patch. The baseball bat that you beat the burglar over the head with is the Symantec virus removal tool.


Microsoft --> writes OS and software with security holes (and the required patches)
Symantec --> writes the antivirus tools that actuallty attack the virus itself

By the way, there are at least three different variants on the Blaster virus now. (creatively named A, B and C) So if you got the virus early on and used the Symantec tool to clean your computer, you may need to download an updated version of the same tool to get rid of it a second time if you get it again.
Happy Virus Hunting and Good Luck.

BTW:
I don't think you need to have IE to update Windows, but in order to use the nice and easy and almost automated Windows Update website, you'll need a browser that correctly inrterprets VBScript. And that list of browsers is pretty short last time I checked. (I think that list has grown to about one recently.) I'm pretty sure that each update available on the Windows Update site is available for download separately on the TechNet site somewhere. Its just not as easy to get that way.


BTW2:
QUOTE
If infected your pc will reboot every 60 seconds. Note that this is almost twice as often as normal.

Thanks for making me blurt out loud laughing and wake up my sleeping one yr old. (IMG:style_emoticons/default/lol3.gif)


- Dan
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
« Next Oldest · 914World Garage · Next Newest »
 

2 Pages V  1 2 >
Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 

Display Mode: Switch to: Standard · Linear+ · Switch to: Outline

Track this topic · Email this topic · Print this topic · Subscribe to this forum

- Lo-Fi Version Time is now: 30th May 2024 - 09:08 AM
Invision Power Board v9.1.4 © 2024  IPS, Inc.
All rights reserved 914World.com © since 2002
914World.com is the fastest growing online 914 community!
We have it all, classifieds, events, forums, vendors, parts, autocross, racing, technical articles, events calendar, newsletter, restoration, gallery, archives, history and more for your Porsche 914 ...