~ GaySatyr

[Link]

Spent some time purging it, and missed chat last night.

Also had to purge something that wrote things into the registry, not the worm.

DenverDon

[Link]

~ GaySatyr

[Link]

(Yeah yeah, stupid thing to say.)



P-Knuckle said:
"I don't want to talk about my feelings though, I find everyone elses opinion much more informative and entertaining."

[Link]

Yes you have to manually delete
a few keys/values in the registry.

Heard the creators of this Blaster
Worm wants to take down the Micosoft
website by Saturday & continue to
infect all systems running Windows
XP, 2000, ME, & NT.

Oh Yeah!

[Link]

You are correct only in that Macs are seldom targeted (they are equally vulnerable); however, as the Apple O/S approaches true UNIX (which it is doing rapidly) Mac, too, shall fall. I recommend a firewall (preferably hardware-based) and regular A/V & O/S updates for everyone.

~ GaySatyr

[Link]

~ GaySatyr

[Link]

Thanks.

[Link]

SNP.

[Link]

As a gay male, it would be near suicidal for me to have unprotected sex with a stranger; as a broadband interr, should I be any less protected?

The cost of a top-quality firewall/router/switch with the NAT feature (the USR8000A [wired] and the FM114P [802.11b wireless] are better than most and are inexpensive compared to most of their competition) is minor compared to the cost in time and money for the cure - especially as some of these nasties are getting lethal!

The whole point of a hardware firewall with NAT is that you can see the internet, but the internet cannot see you. Thus, a worm broadcast looking for likely destinations passes you by; because, as far as it knows, you are not even there. The use of a software-based firewall does not accomplish quite the same thing: with it, you ARE visible on the internet but you are seen "wearing armor," so to speak.

The combination of a good, self-updating anti-virus program (Norton, McAfee, etc), regular operating system updates (check once a month - it takes about 5 to 10 minutes, maximum - and with W2K and XP, it is semi-automated), and a hardware firewall will make your system nearly invincible.

~ GaySatyr

Edited by - GaySatyr on 8/14/2003 4:25:04 PM

[Link]

now i need to fix it...

fucking hackers...

- Pornmaster Mike
www.adultdv-depot.com

[Link]

then i downloaded the windows XP patch and ran it...

MSBLASTER .exe is *NOT* appearing in my processes bar (task manager) - yet im still getting popups?!

what am i doing wrong?

- Pornmaster Mike
www.adultdv-depot.com

[Link]

There are two tools which do an excellent job of cleaning up the garbage sent you by the popup and spyware source companies and two more which effectively protect you from their reappearing:

1. Ad-Aware
2. SpyBot Search & Destroy
3. PopUp Stopper
4. SpyBlocker
~ GaySatyr

[Link]

The netgear is 3x the cost of the robotics, where does that money go?

[Link]

~ GaySatyr

[Link]

SoBig Worm

[Link]

* The Symantec tool did not effectively detect Blaster until sometime late in the week before last. We had a lot of divisions that used FixBlast and then couldn't figure out why they were still spewing crap out on the network. We've had good success with the NAI/McAfee Stinger scanner.

* Some groups didn't understand that simply patching a machine and rebooting it doesn't kill the worm. You need to patch AND remove the worm.

* Others killed the worm but left the PC's connected to the network while patching and got reinfected in the time between disinfecting and patching.

* We have a number of WinXP machines with System Restore enabled, and if you don't disable this functionality, there's a good possiblity that Windows will "roll back" to a previous, worm-infected state.

* The biggest gotcha we've seen is that if you don't cold boot (i.e. shutdown, power-off, then power-on) after disinfecting, the worm still stays memory-resident.

In other words, we had IT professionals who were in such a hurry to fix this worm that they cut corners or didn't read the documentation that our security organization provided to them.

- Saki [faqs]

Edited by - saki on 8/24/2003 11:45:07 PM

[Link]

Danny

[Link]

You should do LiveUpdate on your Norton AntiVirus to make sure you have the latest definitions, then do a full system scan.

You can also run either the "Stinger" tool or FreeScan at McAfee.com.

- Saki [faqs]

[Link]

This is the most annoying one and I am wondering if I have some kind of virus or worm?

Programs are terminating suddenly without any warning or error message - usually shortly after they load. I cannot even run my firewall anymore because it terminates. My task bar also seems hosed, as several programs are no longer appearing on it. Worse, I cannot even install many programs now because the installation routines are terminating suddenly in the middle of the install process. The entire computer does not shut down, just some programs.

Does this sound like the worm? My antivirus software (Trendmicro) is not picking it up.

-- Snowman

[Link]

Or a corrupted operating system.
Might want to reload Windows XP.

Try Norton Antivirus! www.symantec.com

Good Luck!

[Link]

Thanks for your suggestion SyberScott. Since you did think it sounded like a virus, I investigated further and indeed Norton found some serious problems!

C:\magic .exe is infected with Backdoor.OptixPro.13
C:\WINDOWS\SYSTEM32\msiexec16 .exe is infected with Backdoor.OptixPro.13

What's worse, the msiexec16 .exe was actually loading and referenced to run automatically in the registry! I followed Symantec's instructions on how to remove it and the trojan seems to be gone now.

The system seems to be working better now, but I haven't tested everything. At least I was able to load my firewall again and so far, no programs have terminated early.

I'm very disappointed the Trendmicro anti-virus engine did not pick this up. I was using the AV engine they support in System Suite (which is similar to Norton Utilities). I tested it again right before removing the virus, and it doesn't flag this trojan at all. :-(

-- Snowman

[Link]

I don't even care for McAfee either.

Stick with Norton!

And don't forget to run LiveUpdate for
the most recent DAT files regularly.

It'll protect your computer from these
vicious worms & viruses! Oh Yeah!

[Link]

well at least i hope not.....

since i got internet, i had a firewall AND virus program, that i regually update. als o i update Windows quite often so i am pretty confident it hasent got through

------------------
Regards and Thanks
ShiWarrior
- - Minka Fan - -

[Link]

It's like putting condoms on your computer
everytime you turn it on

Can't have enough protection!

[Link]