OT - Ding Dong, the Wicked Worm is dead...

[dogscoff]

I had the worm too. It was preventing me from accessing the MS update site, so I copied all important files to my 2nd partition, then re-ghosted windoze from my laptop's install CDs.

Set mt ISP back up and guess what..? As soon as I went Online it started all over again. Either it had infected something on my D: drive or the worm was being puched onto my PC from the internet as soon as I looged on.

Anyway, used the shutdown -a command to keep my pc awake long enough to download zonealarm, then cut the sucker off. Then I ran the symantec gizmo and am now in the painful process of re-installing all the XP security patches over 56k

The moral of the story? Never play poker with a man whose first name is a city.

[General Woundwort]

Dogscoff -

This worm buries itself into your system restore files, so that if you remove it without being in "safe" mode, it just reloads itself. I ran the remover program, removed the worm, then restarted in safe mode and ran the remove program again - and got the "buried" copy of the worm. FYI.

[ August 14, 2003, 11:30: Message edited by: General Woundwort ]

[rdouglass]

Originally posted by Gryphin:
The good? news?

I don't know if I just got lucky or if the BLasted BLaster could not find our xp system since our ME system sits between it and the web. It is now patched.

Link below is to an artical that puts one sorta bright note on this worm.
http://www.pcworld.com/news/article/...081303X,00.asp
Caution: There are popups at the above link.

quote:

---

In the end, however, BLaster could do Users a favor. A serious--but not devastating--worm of its type might help inoculate the Internet community against future variants that are more virulent, the experts say.

---

Unfortunately, that kind of comment is made every time this kinda' thing happens. Remember the Slammer worm? People were saying the same thing after that happened.

A month after this "event" dies down, most will become complacent again and many won't bother patching for the next 'big threat'.

IMO Thermodyne has it right (EDIT:See the other post reguarding BLaster) - it's all about money and resources. Most companies have thinned their budgets down so much that most IT departments run in purley "reactive mode" and don't have time to be proactive.

Another aspect is that MS's patches / hotfixes / service packs frequently cause more problems then they fix. (Nothing against MS here, just a fact.) People are scared to apply them!

It's sad but true .....

[ August 14, 2003, 15:41: Message edited by: rdouglass ]

[dogscoff]

Thanks GW- I remembered to switch off system restore before applying the fix. My system is now clean=-)

[Gryphin]

We recieved a notice today saying basicaly "that it is a major opperation to distribute a patch across 15,000 systems and requires thorough testing before it is done. Were were working on it but the worm struk first".
I guess I can belive that.

[Thermodyne]

Originally posted by rdouglass:

quote:

---

Originally posted by Gryphin:
The good? news?

I don't know if I just got lucky or if the BLasted BLaster could not find our xp system since our ME system sits between it and the web. It is now patched.

Link below is to an artical that puts one sorta bright note on this worm.
http://www.pcworld.com/news/article/...081303X,00.asp
Caution: There are popups at the above link.

quote:

---

In the end, however, BLaster could do Users a favor. A serious--but not devastating--worm of its type might help inoculate the Internet community against future variants that are more virulent, the experts say.

---

Unfortunately, that kind of comment is made every time this kinda' thing happens. Remember the Slammer worm? People were saying the same thing after that happened.

A month after this "event" dies down, most will become complacent again and many won't bother patching for the next 'big threat'.

IMO Thermodyne has it right (EDIT:See the other post reguarding BLaster) - it's all about money and resources. Most companies have thinned their budgets down so much that most IT departments run in purley "reactive mode" and don't have time to be proactive.

Another aspect is that MS's patches / hotfixes / service packs frequently cause more problems then they fix. (Nothing against MS here, just a fact.) People are scared to apply them!

It's sad but true .....

---

As did this one. RRAS is refusing conections yesterday morning. At least MS got right on it and put up a new patch.

[minipol]

Originally posted by narf poit chez BOOM:
how about M.E.?

Symantec has the answer

Systems Affected: Windows 2000, Windows XP
Systems Not Affected: Linux, Macintosh, OS/2, UNIX, Windows 95, Windows 98, Windows Me, Windows NT

[Gryphin]

The good? news?

I don't know if I just got lucky or if the BLasted BLaster could not find our xp system since our ME system sits between it and the web. It is now patched.

Link below is to an artical that puts one sorta bright note on this worm.
http://www.pcworld.com/news/article/...081303X,00.asp
Caution: There are popups at the above link.

In the end, however, BLaster could do Users a favor. A serious--but not devastating--worm of its type might help inoculate the Internet community against future variants that are more virulent, the experts say.

[ August 14, 2003, 12:11: Message edited by: Gryphin ]

[mottlee]

MY XP System was CLEAN!!!!!!
(I guess I got lucky!)