mlukfc.com Forums - View Single Post

Bigmomma · 16 Aug 2003, 15:42

hmmm...
this isnt Bigmomma.its actually her husband,have just been resetting some internet settings and checking that her files and settings are ok..

Now for this virus...nasty yes...

If you have the blaster virus then ur pc will constantly reboot saying

Windows must now restart because the Remote Procedure Call terminated unexpectedly

then u have 60 seconds...

Windows 2000 users won't see the timer. However, they might see other effects from the RPC exploit. Such as:

1. Problems when creating email messages at least in Outlook and Outlook Express
2. Visual problems with Control panel
3. Add/Remove Programs does not work
4. Drag & Drop function does not work
5. Copy / Paste function does not work
6. some executables don't work
7. Problems with javascript
8. Some programs won't Save at all

The worm also attempts to perform a Denial of Service (DoS) on the Microsoft Windows Update Web server (windowsupdate.com). This is an attempt to prevent you from applying a patch on your computer against the DCOM RPC vulnerability.(very sneaky!)

It is fairly easy to remove,just goto http://securityresponse.symantec.com...oval.tool.html

**NOTE** if you have system restore running then the removal wont work as this backs up your files,so you need to disable system restore first..

Its spread is easing now,or so it seems,but it is one nasty piece of work,and spreads by scanning networks for vulnerable hosts,so you could be infecting many other pcs without even realising it

Because of the way the worm works, it may be difficult to connect to the Internet to obtain the patch, definitions, or removal tool before the worm shuts down the computer. It has been reported that, for users of Windows XP, activating the Windows XP firewall may allow you to download and install the patch, obtain virus definitions, and run the removal tool. This may also work with other firewalls, although this has not been confirmed.

16 Aug 2003, 15:42	#10
Bigmomma Super Loafer Join Date: 07.07.2003 Location: Somewhere in time in my mind......... Posts: 655	hmmm... this isnt Bigmomma.its actually her husband,have just been resetting some internet settings and checking that her files and settings are ok.. Now for this virus...nasty yes... If you have the blaster virus then ur pc will constantly reboot saying Windows must now restart because the Remote Procedure Call terminated unexpectedly then u have 60 seconds... Windows 2000 users won't see the timer. However, they might see other effects from the RPC exploit. Such as: 1. Problems when creating email messages at least in Outlook and Outlook Express 2. Visual problems with Control panel 3. Add/Remove Programs does not work 4. Drag & Drop function does not work 5. Copy / Paste function does not work 6. some executables don't work 7. Problems with javascript 8. Some programs won't Save at all The worm also attempts to perform a Denial of Service (DoS) on the Microsoft Windows Update Web server (windowsupdate.com). This is an attempt to prevent you from applying a patch on your computer against the DCOM RPC vulnerability.(very sneaky!) It is fairly easy to remove,just goto http://securityresponse.symantec.com...oval.tool.html NOTE if you have system restore running then the removal wont work as this backs up your files,so you need to disable system restore first.. Its spread is easing now,or so it seems,but it is one nasty piece of work,and spreads by scanning networks for vulnerable hosts,so you could be infecting many other pcs without even realising it Because of the way the worm works, it may be difficult to connect to the Internet to obtain the patch, definitions, or removal tool before the worm shuts down the computer. It has been reported that, for users of Windows XP, activating the Windows XP firewall may allow you to download and install the patch, obtain virus definitions, and run the removal tool. This may also work with other firewalls, although this has not been confirmed.