Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Internet Worm Plaguing Computers Worldwide
Washington Post ^ | Brian Krebs

Posted on 08/12/2003 2:09:59 PM PDT by WaterDragon

A fast-spreading Internet worm infecting more than a million computers worldwide forced the Maryland Motor Vehicle Administration to shut its offices for the day and is causing problems for other computer networks in the Washington region. The worm, dubbed "Blaster" by security experts, is having a "sporadic" effect on federal agency networks, said a spokesman for the U.S. Department of Homeland Security......(snip) [Article is long but good]

(Excerpt) Read more at washingtonpost.com ...


TOPICS: Business/Economy; Crime/Corruption; Extended News; Foreign Affairs; Government; Miscellaneous; News/Current Events; War on Terror
KEYWORDS: computers; computervirus; crashes; denialofservice; download; microsoft; ms; msblast; patch; portal; servicesmsc; virus; vulnerable; worm
Navigation: use the links below to view more comments.
first previous 1-5051-100101-150151-200201-208 next last
To: tallhappy
thanks!
51 posted on 08/12/2003 3:49:37 PM PDT by King Prout (people hear and do not listen, see and do not observe, speak without thought, post and not edit)
[ Post Reply | Private Reply | To 11 | View Replies]

To: xrp
uh-oh.*downloading patch NOW*
52 posted on 08/12/2003 3:50:26 PM PDT by King Prout (people hear and do not listen, see and do not observe, speak without thought, post and not edit)
[ Post Reply | Private Reply | To 13 | View Replies]

To: Howlin
NOTE: You need administrative rights to run this tool on Windows 2000, or Windows XP.

How do you get administrative rights on your own computer? Should I try?

53 posted on 08/12/2003 3:51:35 PM PDT by WaterDragon (America the beautiful, I love this nation of immigrants.)
[ Post Reply | Private Reply | To 45 | View Replies]

To: Vermonter
We interrupt this thread to allow for a Penguin-Powered Linux gloat.

Look Ma! No Worms!

We now return you to the "how the heck can you fix this broken microsoft thingy" program.

54 posted on 08/12/2003 3:52:12 PM PDT by zeugma (Hate pop-up ads? Here's the fix: http://www.mozilla.org/ Now Version 1.4!)
[ Post Reply | Private Reply | To 32 | View Replies]

To: Howlin
You know, Pin-X is real good at getting rid of worms too....
55 posted on 08/12/2003 3:52:51 PM PDT by Preech1 (Pax Romana, meet Pax Americana...)
[ Post Reply | Private Reply | To 44 | View Replies]

To: WaterDragon
I shoulda downloaded that patch when MS first notified me.
link please
56 posted on 08/12/2003 3:54:08 PM PDT by comnet
[ Post Reply | Private Reply | To 1 | View Replies]

To: WaterDragon
As soon as I clicked on this thread, Zone Alarm popped up to block access by mblast. Can't upgrade the virus checker though.
57 posted on 08/12/2003 3:54:53 PM PDT by SSN558 (Be on the lookout for Black White-Supremacists)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Timesink
I want some of those for the next time i visit Atlanta or Tallahassee.
Yes, for the strip clubs.
58 posted on 08/12/2003 3:56:23 PM PDT by King Prout (people hear and do not listen, see and do not observe, speak without thought, post and not edit)
[ Post Reply | Private Reply | To 21 | View Replies]

To: Howlin
Ok - thanks!
59 posted on 08/12/2003 3:56:28 PM PDT by Enterprise
[ Post Reply | Private Reply | To 45 | View Replies]

To: RayBob
Symantec Security Response

Follow the instructions at this site, then make sure you go to the Windows Update site and install ALL critical updates...NOW!

60 posted on 08/12/2003 3:59:26 PM PDT by 6ppc
[ Post Reply | Private Reply | To 35 | View Replies]

To: WaterDragon
If you are running XP or 2000 you had to set up an administrator account when you first installed the OS (or turned on the computer when it was new). With XP you may have fast user switching turned on, so I don't think it matters.
61 posted on 08/12/2003 4:01:55 PM PDT by 6ppc
[ Post Reply | Private Reply | To 53 | View Replies]

To: tallhappy
while I'm at it, is there a patch for Win98? The internet-capable computers at the ofice use 98, and there doesn't seem to be a link for it on the Blaster patch page.
62 posted on 08/12/2003 4:02:00 PM PDT by King Prout (people hear and do not listen, see and do not observe, speak without thought, post and not edit)
[ Post Reply | Private Reply | To 11 | View Replies]

To: All
We are going to have a good gloat the day someone cares enough to create a worm or virus that hits Macs and Linux.
63 posted on 08/12/2003 4:03:01 PM PDT by Flyer (. . . and I thought I was the only one that reads tag lines)
[ Post Reply | Private Reply | To 60 | View Replies]

To: Lazamataz
The guy who started that thread suckered you into taking it?
64 posted on 08/12/2003 4:03:39 PM PDT by Diddle E. Squat
[ Post Reply | Private Reply | To 4 | View Replies]

To: antivenom
Thanks for your info.
I lost my Windows xp Yesterday..RPC sent the comp into shutdown really fast.
I phoned a tech at my DSL centre...he explained how to disable the RPC..then go get the patch.

*** also found out that disconnecting the DSL..gets you time to go to Run off start type in services.msc. find RPC call in the ledger < double click...then click on recovery...change all the RPC fields to..{take no action)

after ..was able to plug the DSL back in..go get the patch..then go back..follow the same service.msc route..change the fields in RPC to [restart the service]

Stomp that Worm : )

65 posted on 08/12/2003 4:03:46 PM PDT by Light Speed
[ Post Reply | Private Reply | To 27 | View Replies]

To: Howlin
kewl.
*doing ctrl-alt-del*
Not on the machies at work.
*whew*
66 posted on 08/12/2003 4:03:47 PM PDT by King Prout (people hear and do not listen, see and do not observe, speak without thought, post and not edit)
[ Post Reply | Private Reply | To 45 | View Replies]

To: WaterDragon
Wow.....what kind of computer is it??
67 posted on 08/12/2003 4:09:58 PM PDT by Howlin (If we don't post, will he exist?)
[ Post Reply | Private Reply | To 53 | View Replies]

To: RadioAstronomer

68 posted on 08/12/2003 4:10:16 PM PDT by bluesagewoman
[ Post Reply | Private Reply | To 1 | View Replies]

To: WaterDragon
Before it shut down and rebooted itself, did it always happen to say something like "Remote Procedure Call" has unexpectedly terminated? Because if it did, then you had the same problem I had yesterday. My computer rebooted like 15 times and each time i got a message giving me about a minute to save everything saying that "Remote Procedure Call" unexpectedly terminated. I called my uncle and he told me it may be a hacker using an outside computer to get into my computer. So he told me to download zonealarm.com (free version). Let me tell you that zonealarm really worked and stopped the rebooting. But after reading about this worm story and your story, I now wonder that it may not have been some hacker but this internet worm that affected many computers yesterday.
69 posted on 08/12/2003 4:12:11 PM PDT by David1
[ Post Reply | Private Reply | To 1 | View Replies]

To: tallhappy
What is msblast.exe???

Read more about what happened to my computer yesterday here: http://www.freerepublic.com/focus/f-news/962892/posts?page=69#69

I think I do have msblast because it shows up in the program section of the zonealarm I downloaded yesterday. So I am wondering what is it that this msblast thing do.
70 posted on 08/12/2003 4:18:04 PM PDT by David1
[ Post Reply | Private Reply | To 7 | View Replies]

To: KansasConservative1
Why pay Norton for a 2nd rate firewall when Zone Alarm is free?
71 posted on 08/12/2003 4:19:11 PM PDT by philetus (Keep doing what you always do and you'll keep getting what you always get)
[ Post Reply | Private Reply | To 18 | View Replies]

To: King Prout
Get the patch:

http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

And update your virus software.
72 posted on 08/12/2003 4:20:29 PM PDT by Howlin (If we don't post, will he exist?)
[ Post Reply | Private Reply | To 66 | View Replies]

To: tallhappy
No patch for Windows 98 on the website...is it not affected>?
73 posted on 08/12/2003 4:21:28 PM PDT by Preech1 (Pax Romana, meet Pax Americana...)
[ Post Reply | Private Reply | To 9 | View Replies]

To: Howlin
If that ain't a patch for windows 98, I cannot use it here at the office. Is it?
*checking*
Nope, that's the XP patch. Will it do anything useful for Win98?

I've already downloaded the 2k patch and mailed it to my home machine. I'll install it when I get home.
74 posted on 08/12/2003 4:23:49 PM PDT by King Prout (people hear and do not listen, see and do not observe, speak without thought, post and not edit)
[ Post Reply | Private Reply | To 72 | View Replies]

To: David1; WaterDragon
http://www.freerepublic.com/focus/f-news/962206/posts?page=78#78
75 posted on 08/12/2003 4:23:53 PM PDT by Howlin (If we don't post, will he exist?)
[ Post Reply | Private Reply | To 69 | View Replies]

To: King Prout
I'm not positive, but I believe this is limited to Windows XP, ME, 2000, and some NT.

Do NOT quote ME on that. :-)
76 posted on 08/12/2003 4:25:28 PM PDT by Howlin (If we don't post, will he exist?)
[ Post Reply | Private Reply | To 74 | View Replies]

To: philetus
Because neither Norton's or Zone Alarm will do much against determined people. Get a hardware firewall.
77 posted on 08/12/2003 4:26:39 PM PDT by Terpfen
[ Post Reply | Private Reply | To 71 | View Replies]

To: Howlin
content for the moment to cross fingers and pray ==> me
78 posted on 08/12/2003 4:30:06 PM PDT by King Prout (people hear and do not listen, see and do not observe, speak without thought, post and not edit)
[ Post Reply | Private Reply | To 76 | View Replies]

To: RayBob; antivenom; Howlin
Well now......this is interesting.

I did a "edit-find" on my registry for msblast.exe.....and I have the same type of entries as Raybob...only instead of a--b--c-- the entries are listed as:

ab 000 REG SZ (value not set)
ab 001 REG SZ wuaumgr.exe
ab 002 REG SZ explored.exe
ab 002 REG SZ msblast.exe
etc.

BUT.....the REALLY INTERESTING THING TO ME IS.....this is AFTER I have downloaded the Symantec FIX-IT tool and run it.....and have installed the MS Patch. AND Symantec tells me I don't have this file on my system.

What do you make of THAT?

79 posted on 08/12/2003 4:31:28 PM PDT by justshe ("Do you trust a Democrat to protect America?")
[ Post Reply | Private Reply | To 35 | View Replies]

To: justshe
I found the same thing in my registry AFTER running the patch as well...
80 posted on 08/12/2003 4:37:08 PM PDT by Preech1 (Pax Romana, meet Pax Americana...)
[ Post Reply | Private Reply | To 79 | View Replies]

To: 6ppc
Oh, hehe...I've long since not considered Win98 and 95 no longer viable operating systems.
81 posted on 08/12/2003 4:37:08 PM PDT by xrp
[ Post Reply | Private Reply | To 41 | View Replies]

To: justshe
Well, now, I have the top one, but none of the rest.

Do we delete those?
82 posted on 08/12/2003 4:39:44 PM PDT by Howlin (If we don't post, will he exist?)
[ Post Reply | Private Reply | To 79 | View Replies]

To: Preech1
What did you do?

And do you know what the designation 'ab' indicates?

I ran the Symantec removal tool....and got the patch from MS....and did a system scan afterwards. I supposedly am clean!
83 posted on 08/12/2003 4:39:48 PM PDT by justshe ("Do you trust a Democrat to protect America?")
[ Post Reply | Private Reply | To 80 | View Replies]

To: Preech1
I just did, too.

Hmmmm....
84 posted on 08/12/2003 4:40:34 PM PDT by Howlin (If we don't post, will he exist?)
[ Post Reply | Private Reply | To 80 | View Replies]

To: Preech1; Howlin; All
a helpful soul just FReepmailed me the following:

98 doesn't seem to get it. That is why it isn't at the site. I've spent the whole blasted day cleaning the worm off a dozen professor's computers at work. It was a mess. Be happy if you have 98. Thank goodness I have Linux at home!

85 posted on 08/12/2003 4:45:43 PM PDT by King Prout (people hear and do not listen, see and do not observe, speak without thought, post and not edit)
[ Post Reply | Private Reply | To 73 | View Replies]

To: Terpfen
What (hardware firewall) do you suggest?
86 posted on 08/12/2003 4:59:02 PM PDT by philetus (Keep doing what you always do and you'll keep getting what you always get)
[ Post Reply | Private Reply | To 77 | View Replies]

To: philetus
NetGear
87 posted on 08/12/2003 5:00:25 PM PDT by xrp
[ Post Reply | Private Reply | To 86 | View Replies]

To: philetus
Lynksys Cable / DSL 4 port router
88 posted on 08/12/2003 5:08:51 PM PDT by NYTexan (back to the bunker...)
[ Post Reply | Private Reply | To 86 | View Replies]

To: NYTexan
Lynksys = Linksys

89 posted on 08/12/2003 5:11:59 PM PDT by NYTexan (back to the bunker...)
[ Post Reply | Private Reply | To 88 | View Replies]

To: NYTexan
I've had the BEFSR41 for a couple years.
With it, zone alarm, disabling server and workstation in Admin tools,I don't, ever, have problems.
90 posted on 08/12/2003 5:18:40 PM PDT by philetus (Keep doing what you always do and you'll keep getting what you always get)
[ Post Reply | Private Reply | To 88 | View Replies]

To: Light Speed
Uhh...
Could you try that again in clear English?
Perhaps complete sentences instead of fragments?

It's great that you wish to help, but.... daaayyyyyuummmm!

91 posted on 08/12/2003 5:22:45 PM PDT by Publius6961 (Californians are as dumm as a sack of rocks)
[ Post Reply | Private Reply | To 65 | View Replies]

To: Light Speed
Uhh...
Could you try that again in clear English?
Perhaps complete sentences instead of fragments?

It's great that you wish to help, but.... daaayyyyyuummmm!

92 posted on 08/12/2003 5:22:55 PM PDT by Publius6961 (Californians are as dumm as a sack of rocks)
[ Post Reply | Private Reply | To 65 | View Replies]

To: WaterDragon
Does it only attack Windows XP? What about if you're on a network and only one of the computers on the network is XP?
93 posted on 08/12/2003 5:26:00 PM PDT by sweetliberty ("Having the right to do a thing is not at all the same thing as being right in doing it.")
[ Post Reply | Private Reply | To 1 | View Replies]

To: xrp
ANY Windows operating system.

Except ME.  The exploit the worm used is bugged on ME.

94 posted on 08/12/2003 5:26:08 PM PDT by Psycho_Bunny
[ Post Reply | Private Reply | To 13 | View Replies]

To: xzins
I fondly remember a 70's rock group, Uriah Heep, who used to rock the rafters.

Uriah Heep! I saw them too in concert with YES, back in the 70's. I had the album - "The Wizard". They ROCKED!!!

95 posted on 08/12/2003 5:30:27 PM PDT by slimer
[ Post Reply | Private Reply | To 8 | View Replies]

To: King Prout
Windows 98 support is scheduled to end soon, and may have already happened. It is possible that Win98 could be affected but not supported by MS. I have to look it up at the MS Knowledge Base

I think it can infect any system that supports RPC and DCOM.
96 posted on 08/12/2003 5:31:07 PM PDT by Woodman
[ Post Reply | Private Reply | To 85 | View Replies]

To: King Prout
Well, don't just sit there, ask him what we should do about our registries! LOL.
97 posted on 08/12/2003 5:34:14 PM PDT by Howlin
[ Post Reply | Private Reply | To 85 | View Replies]

To: Publius6961
http://www.freerepublic.com/focus/f-news/962206/posts?page=78#78
98 posted on 08/12/2003 5:35:53 PM PDT by Howlin
[ Post Reply | Private Reply | To 91 | View Replies]

To: xrp; WhyisaTexasgirlinPA
I have repaired two friend's computers today. My local network at home(4 boxes) is AOK.
99 posted on 08/12/2003 5:36:56 PM PDT by SeeRushToldU_So ( Something witty, etc, etc....)
[ Post Reply | Private Reply | To 2 | View Replies]

To: King Prout
From the MS Web Site

Attention
In accordance with the Microsoft Product Support Lifecycle, no-charge support for Windows 98 will end on July 1, 2003. Paid-only support will continue to be available from Microsoft at $35 per incident. Support will also be available from some third party providers.

Microsoft will also continue to offer a variety of self-help resources on the Product Support Services Web site until at least January 16, 2006, two years after phone support for Windows 98 ends on January 16, 2004. These resources include the Microsoft Knowledge Base and Newsgroups.


Hot Fix and Security Bulletins
Visit this site to view a list of security bulletins and hot fixes.

But my quick search of Win 98 patches does not seem to care about it. I would guess that you are safe.
100 posted on 08/12/2003 5:38:34 PM PDT by Woodman
[ Post Reply | Private Reply | To 85 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-5051-100101-150151-200201-208 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson