MAJOR VIRUS WARNING!!! (Windows NT/2K/2K3/XP)

[majordag]

WARNING

Ok folks there is a new devastating Virus around, one of the worst ever seen. Please make sure your Anti Virus program is up to date and you Operating System has all the CRITICAL UPDATES. In the even you do get the virus there are some links below to help you get rid of the Worm Virus.

DDoS worm spreading
Simon Wright | Today, 11:45 am | World news

UPDATE | Symantec has produced an easy utility to remove the worm. You should also apply the relevant patches for your version of Windows: XP, 2000, 2003 (32bit), 2003 (64bit).
--------------------------------------------------------------------------------
A new fast-spreading worm is causing headaches for Australian ISPs who are reporting an overload of calls from confused customers asking why their computers are spontaneously restarting.

The worm, MBlast, takes advantage of a Microsoft Windows RPC exploit which can be easily patched by running WindowsUpdate.

Ironically, in four days the worm will start a distributed denial of service attack on Microsoft's WindowsUpdate servers. Get those patches while they're hot.


There are links in there, but my computer is being a bitch and isn't letting me get the html to work properly. If anyone wants the links, just leave a message here and I will email it.... sorry
[Mythor - see my post for the links Spoofy is talking about, she emailed them to me]

This was actually sent to me by my computer guy (he thinks I purposely get all virus's around!!!.....and his mate got it and he had to reformat his computer) but I also saw it on Sunrise this morning

[Munchkin]

Here's part of the message our IT guys sent around when we got hit yesterday

In the mean time I would like to stress that the threat posed by this worm is minimal. This worm falls into the nuisance category rather then the potential to cause damage category.

[Mythor]

The links Spoofy is talking about:


http://securityresponse.symantec.com...r/FixBlast.exe
^ easy utility to remove the worm. You should also apply the relevant patches for your version of Windows:
XP, 2000, 2003 (32bit), 2003 (64bit).


(Please note - Spoofy sent me those links, I'm taking no responsibility if anyone breaks shit. Should work fine, but if not, blame her :P )

[Mythor]

You can use Google to get some news about this exploit.
This is a good set of search terms, again from the email Spoof sent.


You're a casual internet user who has just upgraded to Windows XP. Because you're only a casual net user, you've gone with Bigpond, one of Australia's largest ISPs. You're not net savvy enough to have kept up to date with the latest patches on the Microsoft site. Your mate Joe is bragging about creating some worm program called "W32.Blaster" and how he's been hitting every IP Bigpond owns with it, but your computer keeps rebooting before you can finish reading his email.
You have....... a hammer.

[Mythor]

Stickied Spoofy's post.

Patch program thingy runs so slow. Be prepared for a bit of a wait if you're one of the people who needs to install it.

[Leishpod]

argh! my sis was complaining last night that our home comp was doing that... shutting down - saying something about 32...grrr...

my poor computer! *whines and wants to go home to nurse it better*

weirdly though - i used it after her last night and it didn't stuff up once..

[majordag]

Originally Posted by Munchkin

Here's part of the message our IT guys sent around when we got hit yesterday

Munchkin that would be because you are behind a firewall and most of it would be picked up before it gets to you. Ours at work does the same thing, and you just get a message that says "a virus was detected and has been removed"



Steve is the first to tell me to ignore nuisance viruses but when he actually rings me to tell me, then I know its serious. He always does his research before passing stuff onto his clients and friends.

[majordag]

Originally Posted by Mythor

(Please note - Spoofy sent me those links, I'm taking no responsibility if anyone breaks shit. Should work fine, but if not, blame her :P )

Don't blame me......blame Steve.....I'll give ya his email address

[Mythor]

It's only a nuisance virus because it shuts your computer down and will on the day specified chew up some of your bandwidth in the attempted DOS attack on the WindowsUpdate site. From what I've read, it doesn't actually damage your computer in any way.

[Munchkin]

Originally Posted by Spoofy

Munchkin that would be because you are behind a firewall and most of it would be picked up before it gets to you. Ours at work does the same thing, and you just get a message that says "a virus was detected and has been removed"



Steve is the first to tell me to ignore nuisance viruses but when he actually rings me to tell me, then I know its serious. He always does his research before passing stuff onto his clients and friends.

No a number of our computers were infected with the virus and to quote the IT guy who just walked in the door to clean the server "it's just a nuisance, doesn't actually damage anything".

[VAxwell]

*waves from uni*

Monash Uni has it as well... just overheard one of the IT women talking about it...

Luckily, the computer I'm on now is only Windows 2000 (methinks the Matheson Library is too cheap to upgrade the general use computers) and my tutes were cancelled this morning.

*pats her home computer which is still working on Windows 98SE*

[Cherryish]

Originally Posted by Munchkin

No a number of our computers were infected with the virus and to quote the IT guy who just walked in the door to clean the server "it's just a nuisance, doesn't actually damage anything".

I have no idea about viruses and stuff, but my dad forwarded me this from his work :

(1) In order to avoid the impact of currently spreading virus
W32.Blaster.Worm, please install the security patch MS03-026 immediately.
Otherwise, your PC could be infected by this virus, you could not
use Word/Excel/Outlook/IE,etc.

(2) How you and your users WILL be affected:

- Attacker who successfully exploited this vulnerability could gain
complete control over a remote computer. This would give the attacker
the ability to take any action on the remote computer that they want,
for example, and attacker could change Web pages, reformat the hard
disk, or add new users to the local administrators group.
- Personal Critical information / data can be compromised and
> retrieved with critical risk.

*shrugs and installs the patch*

[Puppy]

TAFE got hit by this today. We were meant to be doing spreadsheets but our workstations kept shutting down... One poor girl behind me was from a different class and was doing her assessment on payroll and MYOB and she ended up being allowed to do it another time.

In the end our teacher gave up on doing anything and gave us a knowledge test (basic spreadsheets :yawn and sent us home

[nikksta]

I got hit yesterday. Wasn't fun. Actually it got funny in the end 'cos I did the countdown with it while I was d/l the patch. *giggles*

But thanks to VAxwell I got told what it was *mushes her*

[Haggis]

Our business network's proxy server is now classed as as "unreliable" (a term used by one of the helpdesk people) - I wonder if it's related?

*Pats the Library network's proxy server* Good UNIX box! No e-mail server here! We disabled it a while back - every time you tried to send an e-mail through it, it crashed the server!