Log in

View Full Version : Anyone here get hit with the blaster32 worm?

devilsminion
13-08-2003, 06:59
I usually do the critical updates on my XP and as I work for Canadas biggest ISP on Tues we were hit with thousands of calls about this nasty little bug.

From what I have experienced I went after about a million calls home and went to d/l the patch where I received that NT w32 shut down procedure so I turned on the XP firewall and was able to d/l the patch. I went and then went to symantec and did a scan for this culprit and was found to be clean. I then turned off the XP firewall and all is well.

I am about to check my registry as the culprit leaves a little note for Bill, something about fix your windows.

Anyone else with any advice???
JoyBoy
13-08-2003, 07:19
Do Not Turn off Your Firewall. The Firewall that comes with Xp is crap by the way.
Looking at Zone Alarm right now, I have had an estimated 200 hits on Port 135 in the last 4-5 hours... You can read up on its effects HERE (http://www.sky.com/skynews/article/0,,30000-12717456,00.html) and the link to the patch can be found on there too.
Quall999
13-08-2003, 07:30
Just protected my computer yesterday. I believe the new xp update puts on an immunity. The company my father works at was hit unfortunately, so he protected our machines as soon as possible.
rms2001
13-08-2003, 11:29
Man that sounds like a nasty little bug. Been hearing about it on the loacl news and now I'm getting emails from my ISP about it.

Well its a good thing I didn't get it. Gotta love thoughs hardware firewalls, they work so much better than the one that comes with XP or ZoneAlarm.

Oh if you want to read more about it the USA Today has a story on it. Predicted Net infection rampages around the world (http://www.usatoday.com/tech/news/computersecurity/2003-08-11-lovesan_x.htm)
JiveTurkey
13-08-2003, 23:29
Yeah I got a few calls to fix it. It's pretty simple and not a particularly nasty virus anyway.

I think that Zone Alarm attack count is very hard to interpret. I've seen them have ridiculous numbers and it has been blamed for counting "normal" traffic too. The number it gives you doesn't necessarily mean your machine has been attacked 200 or something times.