Heads Up On Widespread "MSBLASTER" Virus

[Mr_Vindictive]

I work at an ISP and we have had a massive influx of calls about the new RPC DCOM WORM (MSBLASTER).

This will affect you if you are using Windows NT/2000/XP.

If you are using any of these operating systems, go to windowsupdate.microsoft.com and download the latest upgrades/patches.  

The worm uses the RPC DCOM vulnerability to propagate.  It infects your computer, then takes over port 4444 and uses it to download the worm through ftp.  

If your computer is infected, it could possibly be taken over completely.  Basically, the virus is taking over the remote facilities of these NT based operating systems.

Some might get an error message about the Remote Procedure Call Service failure.  This will in turn start a countdown to shutdown.  If you cannot reach the microsoft page due to the shutdowns then do the following.

Click Start
Click Run
In the white box type: "shutdown /a"
Click ok

This will shut down the automatic timer.  I hope that none of the fellow posters are affected by this, but I figured I'd post this just in case.



Post Edited (08-12-03 07:55)

[Perk]

Thannk you.  My computer has been acting funny and shutting down everytime I got on the internet.  I was starting to worry it was dying on me.  But now I know and knowing is half the battle :).

[Mr_Vindictive]

If you would like the updates for Win NT/2000/XP check out www.clis.com (my isp's site)

At the top of the page you will see a virus alert display at the top.  Click on "Download them from CLIS FTP Server".

Then choose your Operating System and download the proper files.

[Fearless Freep]

I can't find the download for my OS, Redhat 7.2

[Dolph Lundgren]

Thanks for the heads up, Skaboi.

Nick

[Ash]

Whew!

Thanks for the info!

I called my parents at their car dealership to tell them about the worm but I was too late.  
Their P.C. had already become infected.

I was wondering Skaboi, I downloaded that patch from clis.com and installed it.  What exactly does it do?

Also, if you need a good firewall to stop it in it's tracks, go to this link and download this firewall...remember, its free:

http://download.com.com/3000-2092-10184369.html?tag=lst-0-22

I'm glad I received word of this nasty worm early.  
Thanks!



Post Edited (08-12-03 19:02)

[Mr_Vindictive]

Ash,

For some reason even a firewall didn't block out this virus.  Pretty crafty of the person who created it IMHO.

Also, this virus is still out there!  If you do not patch 2000/XP then you STILL have a chance of getting it.

[Fearless Freep]

Unless it can infect me through Quake II, I'm not too concerned because that's all I use Windows for