Nasty Worm going around
Monday, August 11, 2003 by Frogboy | Discussion: WinCustomize News
This hasn't shown up on any news sites yet that I know of but there is a really nasty worm going around the net that uses an exploit in RPC on XP. Make sure you have the latest updates to Windows XP installed or you will get zapped by this at some point.
It will cause a crash in RPC which will force your machine to reboot 60 seconds later (With a count down). It's a PITA to remove too once you get it.
 |
|
Page 3 of 3 | |
|
|---|
Xerraire
Reply #42 Tuesday, August 12, 2003 8:46 AM
Reply #42 Tuesday, August 12, 2003 8:46 AM
Does anyone know 'where' one actually aquires this worm? If there is something inside a download, or your mail, or from a website?
JDavidHarper
Reply #43 Tuesday, August 12, 2003 9:32 AM
Reply #43 Tuesday, August 12, 2003 9:32 AM
I noticed that it only hit my computer with a 60 second countdown when I logged onto a certain number with my ISP. When I logged onto my ISP with a different #, it worked properly. I've since downloaded the Windows Update and Norton Anti-Virus updates. Kind of strange.
Tassie devil
Reply #44 Tuesday, August 12, 2003 10:34 AM
Reply #44 Tuesday, August 12, 2003 10:34 AM
Heard about this worm on the local radio, and was in direct contact with a friend in canada, using peer-to-peer connection exchanging fotos
The next thing that happened was the 30 second warning and away went my web connection.
Thanks to those who have helped resolve this nasty irritant. seems some people still have it in for bill gates hey!?
The next thing that happened was the 30 second warning and away went my web connection.
Thanks to those who have helped resolve this nasty irritant. seems some people still have it in for bill gates hey!?
Whinge A Lot
Reply #45 Tuesday, August 12, 2003 11:19 AM
Reply #45 Tuesday, August 12, 2003 11:19 AM
"Probing Your Port", are computer people really serious or underneath they're all just perverts???
I've not had it, but i've got a hardware firewall that i've got checking port 135... so far nothing.. Guess i'm just lucky!!!
I've not had it, but i've got a hardware firewall that i've got checking port 135... so far nothing.. Guess i'm just lucky!!!
craeonics
Reply #46 Tuesday, August 12, 2003 1:38 PM
Reply #46 Tuesday, August 12, 2003 1:38 PM
This worm knocks on your door through port 135, which by default is open on NT systems.
Blegh, just noticed that I am indeed running the RPC-service. Probably essential then.
Blegh, just noticed that I am indeed running the RPC-service. Probably essential then.
sig101
Reply #47 Tuesday, August 12, 2003 2:51 PM
Reply #47 Tuesday, August 12, 2003 2:51 PM
Yeah, one of the "nice" things about dependencies in the NT systems is that some of these seemingly uneeded services, are. 
If you're running a firewall (whether soft or hard) that shields and blocks your ports to the internet (port 135 in this case) you should be protected. If you got infected because you didn't patch but you have a firewall, check your firewall's configuration. (Rules based firewalls like Kerio and even Norton can have holes if you don't tighten up your rules sets.)
If you're running a firewall (whether soft or hard) that shields and blocks your ports to the internet (port 135 in this case) you should be protected. If you got infected because you didn't patch but you have a firewall, check your firewall's configuration. (Rules based firewalls like Kerio and even Norton can have holes if you don't tighten up your rules sets.)
Russo017
Reply #48 Tuesday, August 12, 2003 3:43 PM
Reply #48 Tuesday, August 12, 2003 3:43 PM
Am I the only one that patches? Wasnt this on the news EVERYWHERE! Jeez... just makes me mad I saw it on techtv's The Screen Savers like 80 million times... It took me a min maybe 2 to patch... And 10 of my n00b friends got it... I just make fun of them tell them they got rcped!
Lord Vimal
Reply #49 Wednesday, August 13, 2003 1:24 PM
Reply #49 Wednesday, August 13, 2003 1:24 PM
hey...u dont need to download this patch...just enable the FIREWALL of ur internet connection (inbuilt with WindowsXP) and see the result!
Joe Blow
Reply #50 Thursday, August 14, 2003 5:38 AM
Reply #50 Thursday, August 14, 2003 5:38 AM
"I just make fun of them tell them they got rcped"
dang that sounds familiar . . . oh yeah! Goldeneye 64!
dang that sounds familiar . . . oh yeah! Goldeneye 64!
yrag2
Reply #51 Thursday, August 14, 2003 2:46 PM
Reply #51 Thursday, August 14, 2003 2:46 PM
This worm is expected to unleash itself this weekend....if you cannot get thru to MS update site (and it will get more difficult as time goes on, and in fact will probably go off line completely on Saturday since this site is the target of the worm), here is a back door to the file. Download the file (it will save to your hard drive) for your OS and and then install.........http://www.microsoft.com/security/incident/blast.asp
Lady_Akasha
Reply #52 Friday, August 15, 2003 11:37 PM
Reply #52 Friday, August 15, 2003 11:37 PM
>
I got it too. Couldn't stay on long enough to get fix it. Got really really angry...either I was going to throw my pc out the window...or wipe out my hard drive and start from scratch. I started from scratch. Working on putting back on right now. Akasha's needless to say not in a good mood. I NEVER get nailed...and I got nailed, dang it!
I got it too. Couldn't stay on long enough to get fix it. Got really really angry...either I was going to throw my pc out the window...or wipe out my hard drive and start from scratch. I started from scratch. Working on putting back on right now. Akasha's needless to say not in a good mood. I NEVER get nailed...and I got nailed, dang it!Please login to comment and/or vote for this skin.
Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:
- Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
- Access to a great community, with a massive database of many, many areas of interest.
- Access to contests & subscription offers like exclusive emails.
- It's simple, and FREE!
|
|
Page 3 of 3 | |
|
|---|
Reply #41 Tuesday, August 12, 2003 6:53 AM