Hello

Welcome, Guest. Please login or register.
Did you miss your activation email?

« previous next »
Pages: [1] 2 3 ... 5

Author Topic: I think I have that bloody worm  (Read 3054 times)

Offline ##RaCeR##
  • Legendary Member
  • ******
  • Posts: 4963
  • Karma: +10/-0
I think I have that bloody worm
« on: August 13, 2003, 03:50:52 AM »
Does it cause an error "svchost has generated errors and will be closed by Windows" upon startup???

Im running Win 2000. Scanning now...
Logged
Offline ooseven
  • The TRUE Scot\'
  • Legendary Member
  • ******
  • Posts: 10105
  • Karma: +10/-0
    • http://
I think I have that bloody worm
« Reply #1 on: August 13, 2003, 03:57:28 AM »
Quote
Originally posted by Samwise in the Hardware/ software forum
LOL... it\'s God\'s way of punishing you. He thinks you\'re TEH GHEY!


:laughing:.
Logged
“If you’re talking about sheep or goats, there could be some issues,” [/color]

Offline GmanJoe

  • Moderator
  • Legendary Member
  • ******
  • Posts: 12133
  • Karma: +10/-0
I think I have that bloody worm
« Reply #2 on: August 13, 2003, 03:57:51 AM »
Yes. Hold on while I get the solution for ya.
Logged
\"Gee,  I dunno.  If I was a chick, I\'d probably want a kiss (or more) from Durst, too.\"--SineSwiper 9/23/03 (from another forum)
Originally posted by Seed_Of_Evil I must admit that the last pic of her ass will be used in my next masturbation. She\'s hot as hell, one of my
Offline ooseven
  • The TRUE Scot\'
  • Legendary Member
  • ******
  • Posts: 10105
  • Karma: +10/-0
    • http://
I think I have that bloody worm
« Reply #3 on: August 13, 2003, 03:58:49 AM »
Its in the same thread in hardware/software were i got that quote from sammy.
Logged
“If you’re talking about sheep or goats, there could be some issues,” [/color]
Offline ##RaCeR##
  • Legendary Member
  • ******
  • Posts: 4963
  • Karma: +10/-0
I think I have that bloody worm
« Reply #4 on: August 13, 2003, 03:59:57 AM »
How the hell did I get it, thats what I want to know. I have Black Ice firewall and Norton Corporate Edition.

How the hell did it get past?
Logged

Offline GmanJoe

  • Moderator
  • Legendary Member
  • ******
  • Posts: 12133
  • Karma: +10/-0
I think I have that bloody worm
« Reply #5 on: August 13, 2003, 04:06:01 AM »
Try this to see if you have it for sure.

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

Hope you stay on long enough. :)
Logged
\"Gee,  I dunno.  If I was a chick, I\'d probably want a kiss (or more) from Durst, too.\"--SineSwiper 9/23/03 (from another forum)
Originally posted by Seed_Of_Evil I must admit that the last pic of her ass will be used in my next masturbation. She\'s hot as hell, one of my

Offline GmanJoe

  • Moderator
  • Legendary Member
  • ******
  • Posts: 12133
  • Karma: +10/-0
I think I have that bloody worm
« Reply #6 on: August 13, 2003, 04:08:26 AM »
Logged
\"Gee,  I dunno.  If I was a chick, I\'d probably want a kiss (or more) from Durst, too.\"--SineSwiper 9/23/03 (from another forum)
Originally posted by Seed_Of_Evil I must admit that the last pic of her ass will be used in my next masturbation. She\'s hot as hell, one of my
Offline ooseven
  • The TRUE Scot\'
  • Legendary Member
  • ******
  • Posts: 10105
  • Karma: +10/-0
    • http://
I think I have that bloody worm
« Reply #7 on: August 13, 2003, 04:08:39 AM »
Don\'t know... did you visit any nasty sites ?
Logged
“If you’re talking about sheep or goats, there could be some issues,” [/color]
Offline ##RaCeR##
  • Legendary Member
  • ******
  • Posts: 4963
  • Karma: +10/-0
I think I have that bloody worm
« Reply #8 on: August 13, 2003, 04:12:36 AM »
Thi virus doesn\'t seem to cause whats happening on my machine though.

Is it different on XP vs 2000???
Logged

Offline GmanJoe

  • Moderator
  • Legendary Member
  • ******
  • Posts: 12133
  • Karma: +10/-0
I think I have that bloody worm
« Reply #9 on: August 13, 2003, 04:16:45 AM »
Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability
Risk
High

Date Discovered
07-16-2003

Description

A buffer overrun vulnerability has been reported in Microsoft Windows that can be exploited remotely via a DCOM RPC interface that listens on TCP/UDP port 135. The issue is due to insufficient bounds checking of client DCOM object activation requests. Exploitation of this issue could result in execution of malicious instructions with Local System privileges on an affected system.

This issue may be exposed on other ports that the RPC Endpoint Mapper listens on, such as TCP ports 139, 135, 445 and 593. This has not been confirmed. Under some configurations the Endpoint Mapper may receive traffic via port 80.


Update

Enterprise Security Manager
Symantec has posted an Enterprise Security Manager™ Response Policy for this vulnerability. It is available here.

Norton Internet Security / Norton Internet Security Professional
Symantec has released an update for these products, via LiveUpdate, to detect this vulnerability. Users of these products should run LiveUpdate to ensure protection against this threat.

Symantec Client Firewall
Symantec has released an update for Symantec Client Firewall to detect attempts to exploit this vulnerability. Symantec Client Firewall users should run LiveUpdate to ensure protection against this threat.

Symantec Client Security
Symantec has released an update for Symantec Client Security to detect attempts to exploit this vulnerability. Symantec Client Security users should run LiveUpdate to ensure protection against this threat.

Symantec Gateway Security
Symantec has released an update for Symantec Gateway Security, via LiveUpdate, to detect this vulnerability. Symantec Gateway Security users should run LiveUpdate to ensure protection against this threat.

Symantec ManHunt 3.0
Symantec has released a Security Update for users of Symantec Manhunt 3.0. Click here for more information.

Symantec Vulnerability Assessment
Symantec Vulnerability Assessment detects and reports this vulnerability. Click here for further information.



Components Affected
Microsoft Windows 2000 Advanced Server SP4
Microsoft Windows 2000 Advanced Server SP3
Microsoft Windows 2000 Advanced Server SP2
Microsoft Windows 2000 Advanced Server SP1
Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Datacenter Server SP4
Microsoft Windows 2000 Datacenter Server SP3
Microsoft Windows 2000 Datacenter Server SP2
Microsoft Windows 2000 Datacenter Server SP1
Microsoft Windows 2000 Datacenter Server
Microsoft Windows 2000 Professional SP4
Microsoft Windows 2000 Professional SP3
Microsoft Windows 2000 Professional SP2
Microsoft Windows 2000 Professional SP1
Microsoft Windows 2000 Professional
Microsoft Windows 2000 Server SP4
Microsoft Windows 2000 Server SP3
Microsoft Windows 2000 Server SP2
Microsoft Windows 2000 Server SP1
Microsoft Windows 2000 Server
Microsoft Windows NT Enterprise Server 4.0 SP6a
Microsoft Windows NT Enterprise Server 4.0 SP6
Microsoft Windows NT Enterprise Server 4.0 SP5
Microsoft Windows NT Enterprise Server 4.0 SP4
Microsoft Windows NT Enterprise Server 4.0 SP3
Microsoft Windows NT Enterprise Server 4.0 SP2
Microsoft Windows NT Enterprise Server 4.0 SP1
Microsoft Windows NT Enterprise Server 4.0
Microsoft Windows NT Server 4.0 SP6a
Microsoft Windows NT Server 4.0 SP6
Microsoft Windows NT Server 4.0 SP5
Microsoft Windows NT Server 4.0 SP4
Microsoft Windows NT Server 4.0 SP3
Microsoft Windows NT Server 4.0 SP2
Microsoft Windows NT Server 4.0 SP1
Microsoft Windows NT Server 4.0
Microsoft Windows NT Terminal Server 4.0 SP6a
Microsoft Windows NT Terminal Server 4.0 SP6
Microsoft Windows NT Terminal Server 4.0 SP5
Microsoft Windows NT Terminal Server 4.0 SP4
Microsoft Windows NT Terminal Server 4.0 SP3
Microsoft Windows NT Terminal Server 4.0 SP2
Microsoft Windows NT Terminal Server 4.0 SP1
Microsoft Windows NT Terminal Server 4.0
Microsoft Windows NT Workstation 4.0 SP6a
Microsoft Windows NT Workstation 4.0 SP6
Microsoft Windows NT Workstation 4.0 SP5
Microsoft Windows NT Workstation 4.0 SP4
Microsoft Windows NT Workstation 4.0 SP3
Microsoft Windows NT Workstation 4.0 SP2
Microsoft Windows NT Workstation 4.0 SP1
Microsoft Windows NT Workstation 4.0
Microsoft Windows Server 2003 Datacenter Edition
Microsoft Windows Server 2003 Datacenter Edition 64-bit
Microsoft Windows Server 2003 Enterprise Edition
Microsoft Windows Server 2003 Enterprise Edition 64-bit
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows Server 2003 Web Edition
Microsoft Windows XP 64-bit Edition SP1
Microsoft Windows XP 64-bit Edition
Microsoft Windows XP Home SP1
Microsoft Windows XP Home
Microsoft Windows XP Professional SP1
Microsoft Windows XP Professional

Recommendations
Block external access at the network boundary, unless service is required by external parties.
Hosts that can send malicious traffic to TCP port 135 can exploit this issue. External access to this port should be filtered at network perimeters. Permit access for trusted or internal hosts and networks only.

Implement multiple redundant layers of security.
Multiple layers of network access control and intrusion detection should be deployed to limit exposure to potentially vulnerable systems and monitor network traffic for malicious or anomalous activity.

Microsoft has released patches to address this issue:


Microsoft Windows 2000 Advanced Server SP4:

Microsoft Patch Windows2000-KB823980-x86-ENU.exe
http://microsoft.com/downloads/details.aspx?FamilyId=C8B8A846-F541-4C15-8C9F-220354449117&displaylang=en

Microsoft Windows 2000 Advanced Server SP3:
Microsoft Patch Windows2000-KB823980-x86-ENU.exe
http://microsoft.com/downloads/details.aspx?FamilyId=C8B8A846-F541-4C15-8C9F-220354449117&displaylang=en

Microsoft Windows 2000 Advanced Server SP2:
Microsoft Windows 2000 Datacenter Server SP4:
Microsoft Windows 2000 Datacenter Server SP3:
Microsoft Windows 2000 Datacenter Server SP2:
Microsoft Windows 2000 Professional SP4:
Microsoft Patch Windows2000-KB823980-x86-ENU.exe
http://microsoft.com/downloads/details.aspx?FamilyId=C8B8A846-F541-4C15-8C9F-220354449117&displaylang=en

Microsoft Windows 2000 Professional SP3:
Microsoft Patch Windows2000-KB823980-x86-ENU.exe
http://microsoft.com/downloads/details.aspx?FamilyId=C8B8A846-F541-4C15-8C9F-220354449117&displaylang=en

Microsoft Windows 2000 Professional SP2:
Microsoft Windows 2000 Server SP4:
Microsoft Patch Windows2000-KB823980-x86-ENU.exe
http://microsoft.com/downloads/details.aspx?FamilyId=C8B8A846-F541-4C15-8C9F-220354449117&displaylang=en

Microsoft Windows 2000 Server SP3:
Microsoft Patch Windows2000-KB823980-x86-ENU.exe
http://microsoft.com/downloads/details.aspx?FamilyId=C8B8A846-F541-4C15-8C9F-220354449117&displaylang=en

Microsoft Windows 2000 Server SP2:
Microsoft Windows NT Enterprise Server 4.0 SP6a:
Microsoft Patch Q823980i.EXE
http://microsoft.com/downloads/details.aspx?FamilyId=2CC66F4E-217E-4FA7-BDBF-DF77A0B9303F&displaylang=en

Microsoft Windows NT Server 4.0 SP6a:
Microsoft Patch Q823980i.EXE
http://microsoft.com/downloads/details.aspx?FamilyId=2CC66F4E-217E-4FA7-BDBF-DF77A0B9303F&displaylang=en

Microsoft Windows NT Terminal Server 4.0 SP6a:
Microsoft Patch Q823980i.EXE
http://microsoft.com/downloads/details.aspx?FamilyId=6C0F0160-64FA-424C-A3C1-C9FAD2DC65CA&displaylang=en

Microsoft Windows NT Workstation 4.0 SP6a:
Microsoft Patch Q823980i.EXE
http://microsoft.com/downloads/details.aspx?FamilyId=2CC66F4E-217E-4FA7-BDBF-DF77A0B9303F&displaylang=en

Microsoft Windows Server 2003 Datacenter Edition :
Microsoft Windows Server 2003 Datacenter Edition 64-bit :
Microsoft Windows Server 2003 Enterprise Edition :
Microsoft Patch WindowsServer2003-KB823980-x86-ENU.exe
http://microsoft.com/downloads/details.aspx?FamilyId=F8E0FF3A-9F4C-4061-9009-3A212458E92E&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition 64-bit :
Microsoft Patch WindowsServer2003-KB823980-ia64-ENU.exe
http://microsoft.com/downloads/details.aspx?FamilyId=2B566973-C3F0-4EC1-995F-017E35692BC7&displaylang=en

Microsoft Windows Server 2003 Standard Edition :
Microsoft Patch WindowsServer2003-KB823980-x86-ENU.exe
http://microsoft.com/downloads/details.aspx?FamilyId=F8E0FF3A-9F4C-4061-9009-3A212458E92E&displaylang=en

Microsoft Windows Server 2003 Web Edition :
Microsoft Patch WindowsServer2003-KB823980-x86-ENU.exe
http://microsoft.com/downloads/details.aspx?FamilyId=F8E0FF3A-9F4C-4061-9009-3A212458E92E&displaylang=en

Microsoft Windows XP 64-bit Edition SP1:
Microsoft Patch WindowsXP-KB823980-ia64-ENU.exe
http://microsoft.com/downloads/details.aspx?FamilyId=1B00F5DF-4A85-488F-80E3-C347ADCC4DF1&displaylang=en

Microsoft Windows XP 64-bit Edition :
Microsoft Windows XP Home SP1:
Microsoft Patch WindowsXP-KB823980-x86-ENU.exe
http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

Microsoft Windows XP Home :
Microsoft Windows XP Professional SP1:
Microsoft Patch WindowsXP-KB823980-x86-ENU.exe
http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

Microsoft Windows XP Professional :
References
Source: Microsoft Security Bulletin MS03-026
URL: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp
Logged
\"Gee,  I dunno.  If I was a chick, I\'d probably want a kiss (or more) from Durst, too.\"--SineSwiper 9/23/03 (from another forum)
Originally posted by Seed_Of_Evil I must admit that the last pic of her ass will be used in my next masturbation. She\'s hot as hell, one of my
Offline mm
  • clyde\'s boss
  • Legendary Member
  • ******
  • Posts: 15576
  • Karma: +10/-0
    • http://
I think I have that bloody worm
« Reply #10 on: August 13, 2003, 04:17:48 AM »
the flaw will do different things to a 2000 machine then a XP machine
Logged
\"Leave the gun. Take the cannoli.\" - Clemenza
Offline ##RaCeR##
  • Legendary Member
  • ******
  • Posts: 4963
  • Karma: +10/-0
I think I have that bloody worm
« Reply #11 on: August 13, 2003, 04:19:14 AM »
What the hell does that all mean though??? I\'m not a techno geek, I have no idea about TCP 40 proxy whateva DCM...
Logged

Offline CHIZZY

  • Icky:1994-2005
  • Legendary Member
  • ******
  • Posts: 5527
  • Karma: +10/-0
  • PSN ID: chizzbot
I think I have that bloody worm
« Reply #12 on: August 13, 2003, 04:22:31 AM »
ewww..... I thought I had a bloody worm once. It was only diarrhea.

Seriously, tho...
Logged
Dinosaurs were killed in the flood. -#RaCeR#
Halle Berry just loves to give me the \"Dutch Oven\". That\'s why I stopped going down on her. It pisses me off so much that I just bang her til she faints. Bitch.-GmanJoe
i just try to make my sefhappy , by beng i company of fri
Offline mm
  • clyde\'s boss
  • Legendary Member
  • ******
  • Posts: 15576
  • Karma: +10/-0
    • http://
I think I have that bloody worm
« Reply #13 on: August 13, 2003, 04:22:34 AM »
you have two solutions

1. keep windows updated, the patch for this flaw was released back in july.
2. run linux
Logged
\"Leave the gun. Take the cannoli.\" - Clemenza
Offline ##RaCeR##
  • Legendary Member
  • ******
  • Posts: 4963
  • Karma: +10/-0
I think I have that bloody worm
« Reply #14 on: August 13, 2003, 04:27:24 AM »
but how did i get it (if it is indeed the worm, still scanning...) if I have both firewall and anti virus software?
Logged
Pages: [1] 2 3 ... 5
« previous next »
 

SMF spam blocked by CleanTalk