Guest Posted August 12, 2003 Report Posted August 12, 2003 Oh what fun this is. I got the worm in my Win2000pro system and it fried my SVChost.exe. I want to first of all tell ALL of you that run Win2K, WinXP, NT, etc, to make sure that you have updated ALL the patches for you OS and your virus scanner. This little beast is NASTY!! It WILL and can take out your entire OS if you are not careful. It is NOT sent via E-mail etc, it actually cruises around and tries to find vulnerable computers. SO it does NOT have to be sent to you. Anyway, If you want to know more, go to Symantec and CNN has a pretty interesting story on it in their technology section. Also, anyone KNOW how I can restore this thing without having to reinstall the WHOLE OS. Thanks
GREG MILLER Posted August 13, 2003 Report Posted August 13, 2003 Jaguar, why are you not running a firewall on your system? Get over to Zone Labs now and download the free version of Zone Alarm. This goes for the rest of you, at least a firewall will prevent you from getting infected and you can update your system safely too. My Router logs have been hammered with port 135, 137, and 445 scans; although my Zone Alarm logs on all Lan PC's are clear. My Machines are fully updated with the lates Virus Dat files, and all Windows Update patches applied. Jaguar you are not alone, I currently have 2 coworkers that have been infected at home, so I will be busy this week.
Guest Posted August 13, 2003 Report Posted August 13, 2003 Right now I have to share my 56K modem connection with my wife, and Zone Alarm will NOT put up with her machine using mine to hook up to the internet via the Win2K share protocols. So I have to turn it off when the wife is on, and that is when I got it. I was able to save her system from major blow up, but mine did a major meltdown last night, but after I got rid of it, via the Symantec program, I downloaded the security patch for it, and the SVChost.exe seems to be stable for now, so I will leave it and reload Win2K when my new system gets here, and then when DSL gets here, I will have both a hardware firewall, via my DSL Router, and my Zonealarm, so I should be covered after that. These new virus and worms are JUST PLAIN NASTY!!
GREG MILLER Posted August 13, 2003 Report Posted August 13, 2003 They say Zone Alarm with not work with MS ICS. I know for a fact that it does, as I did it with my machines before getting DSL. I also had to share the 56k Modem. You have to add all machine IPs to your Trusted zone as a subnet. I don't know about Win2k, but this worked perfectly with Win98se. I had to do the same to Win2k machine and her Win98 machine so files can be shared across the Lan. Until I did that neither machine could see each other. This is why I assign static IP's to all my Lan Machines. I hope this helps you out Jag.
hazzig Posted August 13, 2003 Report Posted August 13, 2003 I use Zonealarm and windows update regularly (last time there was 7 critical updates I guess we are all using windows betas )anyway I didn┬┤t get this worm. Here is a link from symantec. This will prevent the computer rebooting. Some info from M$ link. Hope this will help. [ 08-12-2003, 10:19 PM: Message edited by: Has ]
Guest Posted August 13, 2003 Report Posted August 13, 2003 Yea, we ran into this little beastie at work today; infected about five computers that had Windows XP. Downloaded the fix from symantec and got the update from Windows and it was all good then. Thankfully, most computers at work are still running Windows 98.
Guest Posted August 13, 2003 Report Posted August 13, 2003 I love how they say that you will probably not notice it. WRONGO!!! This thing is a nasty little tick. It took out my SVChost.exe, which ties all of my internet programs together, links don't work, can't look at a webpage from Outlook etc, it also plays with your registry, and can play havoc with outside hardware, my computer could not find my modem about 75% of the time, so had to reboot quite a few times. It also will NOT allow you to access Microsoft update, it is NASTY with a capital N.
Kevin Trotter Posted August 13, 2003 Report Posted August 13, 2003 Sorry you got hit but JUST WHERE IN THE HELL HAVE YOU BEEN! I missed you and thanks for the heads up.
Guest Posted August 14, 2003 Report Posted August 14, 2003 quote: JUST WHERE IN THE HELL HAVE YOU BEEN I have been around, I basically lurk right now, I don't post unless I feel that I can make a contribution.. Once my upgrade gets here, You will see me on a lot more, and this 56K is NOT a lot of fun. So I will be around a lot more once I get the upgrade and the DSL hooked up!! Thanks for missing me though!!
Guest Grayfox Posted August 14, 2003 Report Posted August 14, 2003 quote:Once my upgrade gets here, You will see me on a lot more, and this 56K is NOT a lot of fun. ahhhh yes welcome back to the world of dialup... ive been without my cable connection for so long i forgot what highspeed internet was like... and i dont know if i caught that worm or not, but i would be able to connect to the net for only a few minutes, then id get a warning message saying that the PRC host (or something like that... couldnt remember) was screwed up and that my system had to be restarted... it was a pain in the arse the last few days... yours sounds 10 times more serious though so lets hope you get everything squared away ok.
Wolferz Posted August 15, 2003 Report Posted August 15, 2003 My Linksys DSL Router stands guard like a good soldier and the port attacks from this Nasty were futile. I never had a worry.
Recommended Posts
Please sign in to comment
You will be able to leave a comment after signing in
Sign In Now