Off-Topic Anything Non-Related to the above topics.

MSBlaster Virus Info

Thread Tools
 
Search this Thread
 
Old Aug 12, 2003 | 02:17 PM
  #1  
Damicci's Avatar
Thread Starter
Registered User
 
Joined: Mar 2003
Posts: 177
From: AZ, Tucson
MSBlast Virus Info

This has been affecting XP and Win2k world wide.

There is a vulnerability in the part of RPC that deals with message exchange over TCP/IP. The failure results because of incorrect handling of malformed messages. This particular vulnerability affects a Distributed Component Object Model (DCOM) interface with RPC, which listens on RPC-enabled ports. This interface handles DCOM object activation requests that are sent by client machines (for example, Universal Naming Convention [UNC] path requests) to the server. An attacker who successfully exploited this vulnerability would be able to run code with Local System privileges on an affected system. The attacker would be able to take any action on the system, including installing programs, viewing data, changing data, deleting data, or creating new accounts with full privileges.http://support.microsoft.com/?kbid=823980#

http://www.symantec.com/avcenter/ven...ster.worm.html

Last edited by Damicci; Aug 13, 2003 at 10:40 AM.
Old Aug 12, 2003 | 02:21 PM
  #2  
-HyJynX-'s Avatar
Contributing Member
 
Joined: Mar 2003
Posts: 10,109
From: Pasadena,ca
thx for the heads up.
Old Aug 12, 2003 | 08:52 PM
  #3  
MJ201's Avatar
Registered User
 
Joined: May 2003
Posts: 70
From: Canada
????WHAT????
In english please
Old Aug 13, 2003 | 12:02 AM
  #4  
Bryan's Avatar
Registered User
 
Joined: Jun 2003
Posts: 8,440
From: Harrisburg, PA
Originally posted by MJ201
????WHAT????
In english please
Basically from what I read, its a worm that can allow someone to take full control of your computer, oh and Damicci thanks for the info, YOU DA MAN!
Old Aug 13, 2003 | 12:08 AM
  #5  
rudeboy's Avatar
Contributing Member
 
Joined: Jul 2002
Posts: 2,209
From: buffalo,n.y.
so if you are lazy like me ehat do i do to avoid this?
Old Aug 13, 2003 | 12:23 AM
  #6  
Bryan's Avatar
Registered User
 
Joined: Jun 2003
Posts: 8,440
From: Harrisburg, PA
Originally posted by rudeboy
so if you are lazy like me ehat do i do to avoid this?
Click on the first link and it takes you to the microsoft website and has a security patch to download
Old Aug 13, 2003 | 10:39 AM
  #7  
Damicci's Avatar
Thread Starter
Registered User
 
Joined: Mar 2003
Posts: 177
From: AZ, Tucson
No problem fellas, it hit us hard here at work and we are still recovering, but i know a few people who have been affected personally and have no clue what to do b/c it can harm your system with even infecting it.

so use the first link to patch your version of win2k or xp and use the last link to clean up the virus if you don't have any a/v software, if you do update it and run a scan for MSBLAST.EXE.
Old Aug 17, 2003 | 03:52 AM
  #8  
s14.5boy's Avatar
Contributing Member
 
Joined: Jun 2003
Posts: 673
From: sactown bitch
I got it on monday when it came out and i deleted it yesterday. You jus have to search ur comp for msblast and delete the files then install the patches. You will also have to do a system clean up that you can get from www.antivirus.com. ONe of the blast files will be on your start up however and you wont be able to delete it because your computer will say its in use, you will have to go to START-RUN-type msconfig-go to start up and uncheck the msblast box then you can go back and delete it. It is important that you install the patch because modified versions of the worm have been released. hope that helps!!
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
s14vaxlr8
Engine Swaps
22
Dec 12, 2004 06:47 PM
Sil40_Mayhem
Off-Topic
8
Nov 30, 2003 06:38 AM
Otter
Off-Topic
6
Mar 20, 2003 08:10 AM
TonysS13
Off-Topic
3
Oct 30, 2002 10:09 AM
ALTIMA420
West Coast/Hawaii
5
Feb 25, 2002 06:22 PM




All times are GMT -7. The time now is 12:59 AM.