Worm alert (Windows users beware)! | xltronic messageboard
 
You are not logged in!

F.A.Q
Log in

Register
  
 
  
 
(nobody)
...and 54 guests

Last 5 registered
Oplandisks
nothingstar
N_loop
yipe
foxtrotromeo

Browse members...
  
 
Members 8025
Messages 2614093
Today 6
Topics 127542
  
 
Messageboard index
Worm alert (Windows users beware)!
 

offline DaWeeze from WANTED IN 16 STATES! on 2004-05-03 16:17 [#01171586]
Points: 5213 Status: Addict



Got hit with this bad boy last weekend:

Sasser

Update your OS and virus-ware!


 

offline Gwely Mernans from 23rd century entertainment (Canada) on 2004-05-03 16:17 [#01171588]
Points: 9856 Status: Lurker



does this bring up a popup where you have 60 seconds before
the comp shuts down?

i got that lately, and everyone says its the worm blaster,
except its not, and now im scared.

really scared.


 

offline oscillik from the fires of orc on 2004-05-03 16:19 [#01171594]
Points: 7746 Status: Regular



yet ANOTHER reason why i love being able to say

I'm a Mac user


 

offline DaWeeze from WANTED IN 16 STATES! on 2004-05-03 16:22 [#01171601]
Points: 5213 Status: Addict | Followup to Gwely Mernans: #01171588



DING!

(Annoying little bastard, ain't it?)

;)


 

offline wakisan from The L-Mont (United States) on 2004-05-03 16:28 [#01171610]
Points: 471 Status: Lurker



FUCK!!!! are you serious??? i got a virus that did the 60
second countdown about a month ago and then quarintined it.
and now its doind it agian the other day and i thought it
was the original one. but now im sure its a new one. SHIT!


 

offline nacmat on 2004-05-03 16:30 [#01171615]
Points: 31271 Status: Lurker



I think I am in no danger with windows millenium


 

offline diablo on 2004-05-03 16:33 [#01171619]
Points: 3242 Status: Lurker



I'm fine as i'm running this on a modified Atari ST

(lie)


 

offline ecnadniarb on 2004-05-03 16:35 [#01171622]
Points: 24805 Status: Lurker | Show recordbag



I'm in no danger because I'm not stupid.


 

offline oscillik from the fires of orc on 2004-05-03 16:36 [#01171625]
Points: 7746 Status: Regular | Followup to diablo: #01171619



i think you can run the net on an Atari ST actually

i mean, ok the browser isn't gonna run most things, but i'm
sure i saw something in a computer mag ages ago (im talking
like 1998 here) about someone who surfed the net on their
Atari


 

offline k_maty on 2004-05-03 16:38 [#01171631]
Points: 2362 Status: Regular



Ok, for people who suck at comput0rw3b (not me of course)
which patch should you download from microsoft? There are
like a million.


 

offline ecnadniarb on 2004-05-03 16:45 [#01171641]
Points: 24805 Status: Lurker | Show recordbag



My phone is safe at the moment.


 

offline oscillik from the fires of orc on 2004-05-03 16:47 [#01171644]
Points: 7746 Status: Regular | Followup to ecnadniarb: #01171641



what phone is it that you're on again mate?

is it the Nokia 6600?


 

offline ecnadniarb on 2004-05-03 16:48 [#01171646]
Points: 24805 Status: Lurker | Followup to oscillik: #01171644 | Show recordbag



I have 3 now. I have the Mpx200, The SE P900 and the
Motorola V600.


 

offline oscillik from the fires of orc on 2004-05-03 16:49 [#01171648]
Points: 7746 Status: Regular | Followup to ecnadniarb: #01171646



oh you bastard!!!!!!!!

i want the P900!!!!!!!!!!!!!!!

i'm so jealous

:(


 

offline mappatazee from ¨y¨z¨| (Burkina Faso) on 2004-05-03 16:52 [#01171651]
Points: 14294 Status: Lurker



How would I tell if I have it? I disabled the restart
thing. It's so stupid it's set to that. I just set it to
"Take no action".


 

offline Raz0rBlade_uk on 2004-05-03 16:53 [#01171652]
Points: 12540 Status: Addict | Show recordbag



blaster is the 60sec countdown. It works on the RCP (remote
call procedure) and can affect computer stability and can
cause an unreliable internet connection. There are patches
you can download from Windows Update and there is a symantec
app to kill it if you are infected. Don't panic though cos
the 60 sec countdown can be cause by various errors and not
just this worm/virus.


 

offline DaWeeze from WANTED IN 16 STATES! on 2004-05-03 16:55 [#01171654]
Points: 5213 Status: Addict | Followup to k_maty: #01171631



To help protect your computer against the Sasser worm and
its variants, you must first download and install security
update 835732, which was released with Microsoft Security
Bulletin MS04-011.

Note If you installed the updates for MS04-011 manually or
through Automatic Updates before Friday, April 30, then you
are already protected against this issue.


 

offline Raz0rBlade_uk on 2004-05-03 16:58 [#01171657]
Points: 12540 Status: Addict | Show recordbag



Also check for a process named DLLHOST as it can hide under
this name. Don't search and destroy though as Microsoft has
a file named the same thing (The hackers are clever you
see). Then maybe check your startup, it can be hidden. There
are so many versions so it's hard to check for exact
symptoms.


 

offline altai on 2004-05-03 17:34 [#01171697]
Points: 373 Status: Regular



what is the exact window update to get rid of this? link?


 

offline mappatazee from ¨y¨z¨| (Burkina Faso) on 2004-05-03 17:34 [#01171698]
Points: 14294 Status: Lurker



It seems I have all the windows updates, so it must have
done it automatically with one of them.


 

offline altai on 2004-05-03 17:36 [#01171701]
Points: 373 Status: Regular



i just updated my laptop (which is fuckoring up majourly)
and it didnt fix it. Just formatted it so it cant be virus,
or can it.

had problem on this PC a while ago and update fixed it ,
hmmmmm


 

offline mappatazee from ¨y¨z¨| (Burkina Faso) on 2004-05-04 10:51 [#01172767]
Points: 14294 Status: Lurker



Could I have the worm? I don't know. This is what happens:

Many websites, if I go to them, it only loads the chached
copy, i.e., it doesn't load up new content. Like, I found
it very strange that Fark hadn't updated for over 12 hours.
But the problem was, I had to hit 'refresh' manually to
update it. What the fuck is going on?
Help,
-Mappatazee


 

offline Key_Secret from Sverige (Sweden) on 2004-05-04 10:52 [#01172769]
Points: 9325 Status: Regular | Followup to mappatazee: #01172767



I think you should adjust your settings in your browser to
update the website every time it is loaded... if you know
what I mean.
There is a setting for it. that's not worm behaviour anyway.


 

offline mappatazee from ¨y¨z¨| (Burkina Faso) on 2004-05-04 10:59 [#01172777]
Points: 14294 Status: Lurker



Where is de setting?


 

offline neetta from Finland on 2004-05-04 11:01 [#01172779]
Points: 5924 Status: Regular



they actually had to close banks in finland because of this


 

offline Key_Secret from Sverige (Sweden) on 2004-05-04 11:01 [#01172780]
Points: 9325 Status: Regular | Followup to mappatazee: #01172777



what browser are you using?
it's in the cache-setting.


 

offline mappatazee from ¨y¨z¨| (Burkina Faso) on 2004-05-04 11:04 [#01172787]
Points: 14294 Status: Lurker



Well I will just clear the cache or something.


 

offline Key_Secret from Sverige (Sweden) on 2004-05-04 11:05 [#01172788]
Points: 9325 Status: Regular | Followup to mappatazee: #01172787



Yeah. you need to set the browser to always reload the page
on every visit (and not use the cached website).
It's in the (cache)settings of your browser.


 

offline Paco from Gothenburg (Sweden) on 2004-05-04 12:46 [#01172934]
Points: 2659 Status: Lurker



I don't know what the hell is going on. I download "things"
and the downloads freeze in a few minutes. Both with mozilla
1.6 and ultra mega on the edge hip FIREFOXTM


 

offline DoctorMO from London (United Kingdom) on 2004-05-04 12:49 [#01172940]
Points: 99 Status: Regular



I'm immune *does a dance around the equinox like so many
pagens*

Mac, Linux, BSD, Palm, Mwahahaha.


 

offline oscillik from the fires of orc on 2004-05-04 12:52 [#01172946]
Points: 7746 Status: Regular | Followup to DoctorMO: #01172940



thought you were running Windows on your PeeCee?


 

offline mappatazee from ¨y¨z¨| (Burkina Faso) on 2004-05-04 12:52 [#01172948]
Points: 14294 Status: Lurker | Followup to DoctorMO: #01172940



*pagans.


 

offline afxNUMB from So.Flo on 2004-05-04 12:55 [#01172952]
Points: 7099 Status: Regular



i went to windowsupdate.com then i got the StingerV2.2.4,
but this is at my work.


 

offline DoctorMO from London (United Kingdom) on 2004-05-04 13:03 [#01172962]
Points: 99 Status: Regular



My Windows XP box is for playing games and is NEVER
connected to the internet or any kind of a network not even
for updates. windows is just too unsecured I can'a be
bothered to sort it out.


 

offline oscillik from the fires of orc on 2004-05-04 13:06 [#01172967]
Points: 7746 Status: Regular | Followup to DoctorMO: #01172962



ah i see

no problemo then

:)

oh yeh, i dunno if you know or not, but they released C&C:
Generals for Mac a while back........don't bother getting
it

you know the trouble you had running it on PC? it's supposed
to have been ported really badly, so even on a good spec
machine it crawls.

a very bad port :(


 

offline Sempoo from Barlinek (Pluto) on 2004-05-05 09:49 [#01174163]
Points: 621 Status: Regular



I've already installed required patch and now I'm safe.
Although our LAN works really slow lately.


 

offline Paco from Gothenburg (Sweden) on 2004-05-05 11:03 [#01174229]
Points: 2659 Status: Lurker



Yeah, but what the hell is cutting off my downloads?

I tried downloading opera and the download almost worked.
The DL speed popped up to an amazing 576kB/s, but it only
managed to get 61% of the 15.7MB file.

I don't think I have sasser, but something is terribly
wrong.

The symtoms:

Regular surfing: OK

File download: Freezes network traffic and I have to reboot
to get it going again. If I try to surf straight after the
freeze, Mozilla just goes "resolving host..bla bla" and then
nothing.


 

offline mappatazee from ¨y¨z¨| (Burkina Faso) on 2004-05-05 11:04 [#01174235]
Points: 14294 Status: Lurker



The page reload thing wasn't fixed looks like. I don't know
what the hell is up with that.


 

offline Oddioblender from Fort Worth, TX (United States) on 2004-05-05 11:05 [#01174238]
Points: 9601 Status: Lurker | Followup to DaWeeze: #01171586



yeah i updated mine yesterday upon hearing about it on the
news. my system is clean thankfully.


 

offline -crazone from smashing acid over and over on 2004-05-05 11:24 [#01174258]
Points: 11234 Status: Lurker | Show recordbag



It's so fucked up: aaaaaaaaaaaaaaaaaaaaaaaaaaarg!

I downloaded a new protection programma "F-secure", via
microsoft btw, and after installing my comp had to be
restarted, well that's the only thing it does right now,
restarting; it doesn't go further, the only thing I can do
is get into my bios; HELP WANTED!! I'm now at work, maybe
someone had the simular problem before? I'm using win2000


 

offline mappatazee from ¨y¨z¨| (Burkina Faso) on 2004-05-05 11:28 [#01174263]
Points: 14294 Status: Lurker | Followup to -crazone: #01174258



Yo be fucked, son.


 

offline mappatazee from ¨y¨z¨| (Burkina Faso) on 2004-05-05 11:28 [#01174264]
Points: 14294 Status: Lurker | Followup to -crazone: #01174258



-->Boot with start up disk
-->"format C:"
-->Re-install windows.


 

offline -crazone from smashing acid over and over on 2004-05-05 12:07 [#01174340]
Points: 11234 Status: Lurker | Show recordbag



Yes thank you; I already knew that one


 

offline E-man from Rixensart (Belgium) on 2004-05-06 02:08 [#01175219]
Points: 3000 Status: Regular



here in belgium our phone company blocked the ports used by
the worm so you normally can't get it here, thanks for once
to those suckers...


 

offline THAXFA from Hähnlein (Germany) on 2004-05-06 02:28 [#01175225]
Points: 1163 Status: Lurker



Sasser Update.....

SASS_ER


 

offline THAXFA from Hähnlein (Germany) on 2004-05-06 02:32 [#01175228]
Points: 1163 Status: Lurker



hit this one...intall it...restart....ready......

got this one on work, could*t work for 1 1/2 Days....shite
!


 

offline Sempoo from Barlinek (Pluto) on 2004-05-06 08:14 [#01175573]
Points: 621 Status: Regular



Microsoft is ridiculous! After updating WinXP [Sasser patch
and other newest updates] I had to install Blaster patch
[KB823980] for the second time! Also I've noticed that
installation of SP1a removes the installation of KB823980!!
This is insane :-x


 

offline oscillik from the fires of orc on 2004-05-06 11:20 [#01175747]
Points: 7746 Status: Regular | Followup to Sempoo: #01175573



you're only just coming to this realisation?


 

offline afxNUMB from So.Flo on 2004-05-06 11:43 [#01175775]
Points: 7099 Status: Regular



I have that fucking blue screen so i havent been able to go
on my computer :(


 

offline pachi from yo momma (United States) on 2004-05-06 11:48 [#01175781]
Points: 8984 Status: Lurker



Damn. My subscription for Norton Antivirus expired months
ago, and I have to pay for it to get a new one. =(

Well, at least I can trust Ad-Aware. Still, considering I'm
on a PC that runs off of WinXP, I could be at risk.



 


Messageboard index