• Quick note - the problem with Youtube videos not embedding on the forum appears to have been fixed, thanks to ZiprHead. If you do still see problems let me know.

Mass Hack

I got hit it a week ago. The amount of people getting hit seems to have drastically increased since then. In one forum I go to over 20 people have gotten it, and we have maybe 60 active members.

The stuff you get infected with are easy enough to get rid of though, at least once you know the basics of virus removal and have a good AV.
 
I hop ethis gets through. I have two accounts on my computer. The account I used to download and run th epatch is no longer allowing me access to the outside world in any way. And on the other account I am using right now, it has a system shutdown message which only allows me to use the ocmputer for one minute. I am typing fast as I can.

This sytem is shutton down,. Please save ll work in progress and log off. This shutdown was initiated by NT autority/system
 
Computer reboots all by itself. I log back on, and I get a one minute warning it is going to reboot again.

And yes, I have restored my computer to a point prior to patch. I tried three restore points, all the way back to two weeks ago.

Windows XP.

Here I go, rebooting itself again. MOTHERF***ER!!!!!
 
Luke T. said:
This sytem is shutton down,. Please save ll work in progress and log off. This shutdown was initiated by NT autority/system
Click to expand...

This sounds like the worm, not any problem caused by installing the patch. :eek:

Go to start/run and type in msconfig then click ok

Click the Startup tab

If you see anything that says msblast.exe (there are possibly other alaises also), chances are you're infected with this critter.
 
I read once that it's very difficult to block your RPC port unless you have firewall software, but I found an easy way (if you know enough to do it). If you have Internet Connection Sharing on the computer that's connected to the Internet (you can enable it just to do this if you want), you can use the Advanced settings to forward port 113 to a non-existant address.

David
 
Luke T. said:
Computer reboots all by itself. I log back on, and I get a one minute warning it is going to reboot again.

And yes, I have restored my computer to a point prior to patch. I tried three restore points, all the way back to two weeks ago.

Windows XP.

Here I go, rebooting itself again. MOTHERF*CKER!!!!!
Click to expand...

Luke, Sounds like you have the patch but the msblast is still on your system.

Delete/stop running msblast then install patch.
 
Luke T. said:
Computer reboots all by itself. I log back on, and I get a one minute warning it is going to reboot again.

And yes, I have restored my computer to a point prior to patch. I tried three restore points, all the way back to two weeks ago.

Windows XP.

Here I go, rebooting itself again. MOTHERFU*KER!!!!!
Click to expand...

I had the same thing happen on Win XP. I went into the network control panel and enabled the firewall protection from the Advanced tab, that seemed to stop it. Either I just got lucky, or this hack relies on a remote proc call sent from outside and the firewall blocks it.
 
Luke T. said:
I hop ethis gets through. I have two accounts on my computer. The account I used to download and run th epatch is no longer allowing me access to the outside world in any way. And on the other account I am using right now, it has a system shutdown message which only allows me to use the ocmputer for one minute. I am typing fast as I can.

This sytem is shutton down,. Please save ll work in progress and log off. This shutdown was initiated by NT autority/system
Click to expand...


My wife was on the computer last night when she suddenly started getting this warning and getting kicked off. I guess now I know why. I guess I know what I'll be messing around with when I get home from work today. Bastards.
 
Hey Bluegill! I caught Heide Howe last night here in St. Louis coffeehaus. Louisville's own.

She rocks! Well, she folks anyway...
 
bignickel said:
Hey Bluegill! I caught Heide Howe last night here in St. Louis coffeehaus. Louisville's own.

She rocks! Well, she folks anyway...
Click to expand...

Howdy! Heidi Howe (heh heh) hired my sister-in-law (I ran out of H-words, darn it) to film some of her concerts, but I've never seen her. She gets pretty good press. I suppose I should try to see one of her shows.

So I guess you and I practically know one another [waves];)
 
Getting rid of the virus has proven more difficult than I thought. I also think it is too strange a coincidence that it didn't kick in until the moment I tried to get the patch from Microsoft to work.

I still can't get the patch to work. But I got the virus remover that Wolverine linked from Symantec to work.

But that didn't work right away. I had files on my computer that were unrelated to the virus which were corrupted and would not delete. This caused the virus remover to halt and quit when it came across them.

I finally had to go into DOS and manually delete them, then I got the virus remover to finally work.

The Microsoft patch still won't run.

If I were to get my hands on the hacker who wrote this virus, I would turn Islamic for a few minutes and break his face, pull off his ears, cut out his tongue, break his knees, and cut off his hands one finger at a time. With a dull, rusty butter knife and no anethesia.

Let him try and write code as a deaf, dumb, fingerless cripple.
 
You must log in or register to reply here.

Back
Top Bottom