If you've got the new virus/worm, look here before requesting aid

[Bossy Monkey]

A brief compendium (or is that index?) of DU wisdom on the subject:
http://www.democraticunderground.com/discuss/duboard.php?az=show_topic&forum=111&topic_id=3749
http://www.democraticunderground.com/discuss/duboard.php?az=show_topic&forum=105&topic_id=89275
http://www.democraticunderground.com/discuss/duboard.php?az=show_topic&forum=105&topic_id=89064
http://www.democraticunderground.com/discuss/duboard.php?az=show_topic&forum=105&topic_id=89652

Here's the poop from McAfee:
http://vil.nai.com/vil/content/v_100547.htm

Good luck. Don't panic.

Lounge lizards, kindly keep this kicked.

[Cha]

1. Kick!

:kick:

I think that http://www.bartcop.com link is a good link for the "wormblaster" virus that I had for microsoft windows.

[Cha]

2. And thanks for this composit, UNL!

:-)

[SOteric]

3. You left out:

http://www.democraticunderground.com/discuss/duboard.php?az=show_topic&forum=105&topic_id=87277&mesg_id=87277

The link in which describes how you patch the buffer over-run, then removed the virus, then remove the executable files in regedit regardless of which of the vulnerable editions of Windows one is running.

Luck to all, and remain calm. There is life again after Blaster.

:hi:

[Bossy Monkey]

4. Thanks!

I meant to suggest folks add any I missed.

[TrogL]

5. You need these three patches

* Microsoft Security Bulletin MS03-030
Unchecked Buffer in DirectX Could Enable System Compromise (819696)

http://microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-030.asp

* Microsoft Security Bulletin MS03-026
Buffer Overrun In RPC Interface Could Allow Code Execution (823980)
http://microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp

* Microsoft Security Bulletin MS03-023
Buffer Overrun In HTML Converter Could Allow Code Execution (823559)
http://microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-023.asp

Make sure you get the correct file for your operating system.

[ParanoidPat]

6. Thanks TrogL.....

....and a :kick: for the night crew! :evilgrin:

[GoddessOfGuinness]

7. kick

[opihimoimoi]

8. kick

:kick:

[Kenneth ken]

9. kick n/t

[Kamika]

10. To stop the countdown timer

On XP/Win2K, if you get the shutdown message, you can fire up a command prompt (Start-->Run--> Type in "cmd" and hit return)

At the command prompt type "shutdown -a" and that will stop the shutdown process in its tracks allowing you to continue whatever it was you were doing to research the problem.


curtesy of markbark

[qb]

18. Thank you!!!

I downloaded the Symantic fix at work, and ran it on my home computer (it took 10 minutes). At the end, it linked to the Microsoft patch, so I engaged my dial-up service. The worm got in and shut my computer down before the download was half finished! It does this every time.

I managed to download the patch at work and put it on a floppy, but It's good to have a backup in case I need to download something else.

BTW - would the autmatic Windows updates have prevented this? I disabled the auto updates after Microsoft announced they were cooperating with AssKKKroft. I guess I have to choose between Big Brother and the virus-writing anarchists.

[KG]

11. true - no need to panic

by making the change in regedit i have been able to stop the reboots, and appearently thats the worst part of the bug.

but due to the demand i have been unable to d/l an antivirus yet. but i'll get that sucka yet!

[Kamika]

12. Go here

Its a online virus scan, it found my worm in the initial scannings of the system


http://housecall.antivirus.com/housecall/start_corp.asp

[UrbScotty]

13. So this does not affect Windows 98, right?

That's what I've heard.

[Bossy Monkey]

17. Right, according to Microsoft

whom you can trust as far as you can throw them, but still:
http://www.microsoft.com/security/incident/blast.asp

[myomy]

14. Step 2: Run down and buy a Mac.

.

[WilliamPitt]

15. This virus eats ass

This stuff'll help.

[ScreamingMeemie]

16. Ah crap, call me computer illiterate, but I cannot do the recommended

fix on Microsoft because my computer locks up at Alt,Control,Delete..



Aiiieeeeeeeeeeeeeeeeeeeeeeeeeeee........

[Bossy Monkey]

19. kick 'cause somebody else asked

[newyawker99]

20. kick

:kick:

[bearfartinthewoods]

21. kick

[Kamika]

22. klick