Author Topic: Virus Warning  (Read 19951 times)

Offline Kaenga

  • Great Explorer
  • *****
  • Posts: 530
    • View Profile
    • http://www.beepworld.de/members59/chaos-kaenga/
    • Email
Virus Warning
« Reply #15 on: July 09, 2003, 11:14:40 AM »
:evil:

So my Computer totally brock down yeaster day, looks like Virus.

I dont know what to do?


Kaenga :-(
------------------------------------------------------
Music is security.
Music is my life , helps me to survive.

Wo ich bin herrscht das Chaos doch zum Glück bin ich nicht überall!!!

Offline Klaus

  • Administrator
  • Cast Of Thousands
  • *****
  • Posts: 3730
    • ICQ Messenger - 47852913
    • View Profile
    • http://www.tvsmith.com
    • Email
Virus Warning
« Reply #16 on: July 09, 2003, 12:22:25 PM »
Are you serious? Damn Shit.
Is it working again or are you writing from a different PC?

If it is working try a virus online check on this site:
http://housecall.antivirus.com/housecall/start_corp.asp

And once your PC is clean again, don't forget to install a decent Anti-Virus tool on your PC and keep it always up to date!

Klaus
"And if our castle should come tumbling down - We'll fix it up again somehow
We can do anything - That' the wonderful thing...

Carrying On"

Offline Kaenga

  • Great Explorer
  • *****
  • Posts: 530
    • View Profile
    • http://www.beepworld.de/members59/chaos-kaenga/
    • Email
Virus Warning
« Reply #17 on: July 11, 2003, 09:19:16 PM »
Seriously :-(

I`n on the computer from my parents.

Meine Festplatte ist total hin über.


Drei Wochen mal nicht den Viren Scan abgedatet und schon habe ich den Salat.

Kaenga
------------------------------------------------------
Music is security.
Music is my life , helps me to survive.

Wo ich bin herrscht das Chaos doch zum Glück bin ich nicht überall!!!

Offline Klaus

  • Administrator
  • Cast Of Thousands
  • *****
  • Posts: 3730
    • ICQ Messenger - 47852913
    • View Profile
    • http://www.tvsmith.com
    • Email
Virus Warning
« Reply #18 on: July 14, 2003, 05:08:12 AM »
Quote from: "Kaenga"
Seriously :-(
I`n on the computer from my parents.
Meine Festplatte ist total hin über.
Drei Wochen mal nicht den Viren Scan abgedatet und schon habe ich den Salat.
Kaenga


 :( Shit :(
"And if our castle should come tumbling down - We'll fix it up again somehow
We can do anything - That' the wonderful thing...

Carrying On"

Offline HosenFan

  • Bored Teenager
  • ****
  • Posts: 338
    • ICQ Messenger - 320709888
    • View Profile
    • Email
Virus Warning
« Reply #19 on: August 12, 2003, 10:14:38 PM »
now we have a new virus, so if anybody gets the message that windows will shut down in 60 seconds, then download this patch and install it: http://microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=2354406C-C5B6-44AC-9532-3DE40F69C074
They'll tell you that they love you, like a spider loves a fly.
Promise you you're safe but never look you in the eye.

Offline Mrs Fleagle

  • Moderator
  • Cast Of Thousands
  • *****
  • Posts: 1684
    • MSN Messenger - aliensathome@hotmail.com
    • View Profile
    • Email
Virus Warning
« Reply #20 on: August 12, 2003, 10:24:07 PM »
Hosenfan

You are brilliant  :D

Fleagles father has just got this virus, you have saved Fleagle a lot of work  8)

Thank you

Mrs Fleagle  :roll:
e have guided missiles and misguided men.

Offline HosenFan

  • Bored Teenager
  • ****
  • Posts: 338
    • ICQ Messenger - 320709888
    • View Profile
    • Email
Virus Warning
« Reply #21 on: August 12, 2003, 10:44:58 PM »
sorry, but there is still some work to do. the patch doesn't delete the virus. it solves the problem with the 60sec shutdown

now it gets a bit complicated (it is hard to describe it in english for me :( )

I use windows xp. Could be possible that there are some problems with oder windows versions.

first german:

unten links auf den start knopf klicken -> dann ausfuehren -> dann msconfig eintippen und mit enter bestaetigen. jetzt auf systemstart und den befehl msblast.exe suchen und ggf deaktiveren (haeckchen rausmachen) noch nicht den computer neustarten! danach in den taskmanager mit strg+alt+entf (kennt doch jeder windows benutzer  :D  ) und und bei prozesse wieder msblast.exe suchen. rechtsklick drauf und beenden. danach wieder auf den start knopf und dann auf suchen. die datei "msblast.exe" in ordnern und dateien suchen und wenn sie gefunden wird loeschen. rechtsklick und loeschen. jetzt den computer neustarten. wenn noch nicht geschehen den patch (siehe anderer post von mir) runterladen und installieren und neustarten. man kann jetzt noch im registrierungseditor pruefen, ob er wirklich nicht mehr laeuft. wie auf ausfuehren im start menu klicken und dieses mal regedit eintippen und enter druecken. danach oeffnet sich ein fenster. den ordner H_KEY_Local_Maschine/Software/Microsoft/Windows/Current Version/Run waehlen und dort nachsehen, ob es noch eine zeile ""windows auto update"="msblast.exe" " gibt. wenn ja loeschen. das sollte reichen.
vielleicht kann das jemand uebersetzen.

und nichts anderes im reg. editor machen, sonst laeuft windows vielleicht gar nicht mehr.
They'll tell you that they love you, like a spider loves a fly.
Promise you you're safe but never look you in the eye.

Offline Mrs Fleagle

  • Moderator
  • Cast Of Thousands
  • *****
  • Posts: 1684
    • MSN Messenger - aliensathome@hotmail.com
    • View Profile
    • Email
Virus Warning
« Reply #22 on: August 12, 2003, 11:15:51 PM »
Hosenfan

Thank you the quick link to the patch was really usefull we can manage the rest so don't worry about the English instructions, unless you enjoy a challenge  :?


Mrs Fleagle  :roll:
e have guided missiles and misguided men.

Offline admin

  • Administrator
  • New Discoverer
  • *****
  • Posts: 4
    • View Profile
    • Email
Virus Warning
« Reply #23 on: August 12, 2003, 11:20:50 PM »
Symantec removal tool for W32.Blaster.Worm:

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

My PC and 2 of our costumers' PCs got it today.

Greetings
Klaus

Offline fleagle

  • Cast Of Thousands
  • ******
  • Posts: 1106
  • you will never know who you really are
    • MSN Messenger - info@stagefrite.co.uk
    • View Profile
    • stagefrite - keepin it live!
    • Email
beat me to it Klaus!
« Reply #24 on: August 12, 2003, 11:26:35 PM »
i was just about to drop that link in!!
had a good read....
my dad has got the virus - taking my 'patches' to fix it in the morning!!

 :lol:  :lol:

thanks again to hosen fan for the initial info - saved me trawling through a few websites looking for it!!

fleags
I got some presents for you boo-boo

Offline HosenFan

  • Bored Teenager
  • ****
  • Posts: 338
    • ICQ Messenger - 320709888
    • View Profile
    • Email
Virus Warning
« Reply #25 on: August 12, 2003, 11:36:22 PM »
klaus, hast du port 135 nicht gesperrt und keine firewall?
They'll tell you that they love you, like a spider loves a fly.
Promise you you're safe but never look you in the eye.

Offline Klaus

  • Administrator
  • Cast Of Thousands
  • *****
  • Posts: 3730
    • ICQ Messenger - 47852913
    • View Profile
    • http://www.tvsmith.com
    • Email
Virus Warning
« Reply #26 on: August 13, 2003, 09:14:43 PM »
Quote from: "HosenFan"
klaus, hast du port 135 nicht gesperrt und keine firewall?


Hab ne Firewall und hab den Wurm auch wegen ihr bemerkt.
Auf einmal wollte die komische Datei irgendwo hin funken und ist geblockt worden.
Den offiziellen Patch von MS habe ich auch noch eingespielt.

Klaus
"And if our castle should come tumbling down - We'll fix it up again somehow
We can do anything - That' the wonderful thing...

Carrying On"

Offline admin

  • Administrator
  • New Discoverer
  • *****
  • Posts: 4
    • View Profile
    • Email
Virus Warning
« Reply #27 on: August 20, 2003, 10:51:05 AM »
Looks like a TUTS got the W32.Sobig.F@mm-virus on his/her PC.

If you are not sure, if your PC is infected, please run this:

http://securityresponse.symantec.com/avcenter/FixSbigF.exe

Your fellow TUTS will appreciate this a lot. :D

Klaus

Offline Lari77

  • Great Explorer
  • *****
  • Posts: 612
    • View Profile
    • Email
geloben und gepriesen sei der herr...
« Reply #28 on: August 21, 2003, 06:34:50 PM »
i finally got rid of my two viruses - which means, that i'm able again to use smiles, my html works again and everything is fine :D

and that means, that i (can) continue my work on http://www.tvsmith.de.vu - i'm doing my best, i hope you like it (well, it's more or less very ragged, but what should i say: it's my first time...)
nce you hear the details of victory, it is hard to distinguish it from a defeat.

Offline Klaus

  • Administrator
  • Cast Of Thousands
  • *****
  • Posts: 3730
    • ICQ Messenger - 47852913
    • View Profile
    • http://www.tvsmith.com
    • Email
Re: geloben und gepriesen sei der herr...
« Reply #29 on: August 21, 2003, 07:28:19 PM »
Quote from: "Lari77"
i finally got rid of my two viruses - which means, that i'm able again to use smiles, my html works again and everything is fine :D

and that means, that i (can) continue my work on http://www.tvsmith.de.vu - i'm doing my best, i hope you like it (well, it's more or less very ragged, but what should i say: it's my first time...)


Wow! :D
I am impressed!
Looks great.

Do you want me to put the link up today or later?

Klaus
"And if our castle should come tumbling down - We'll fix it up again somehow
We can do anything - That' the wonderful thing...

Carrying On"