Article View: alt.comp.virus
Article #34Re: URGENT - BLASTER LIKE VIRUS, PC IN CONTINUOUS SHUT DOWN LOOP
From: cquirke (MVP Win9x)
Date: Thu, 23 Oct 2003 07:08
Date: Thu, 23 Oct 2003 07:08
30 lines
2713 bytes
2713 bytes
On Wed, 22 Oct 2003 15:04:34 +1000, Matthew Kirkcaldie >In article <mnnlb.160824$bo1.113551@news-server.bigpond.net.au>, > "Michael" <mixstatdonotspam@bigpond.net.au> wrote: >> If you are using NT4 Workstation (not Server) it crashes after patch 823559 >> and 823980 are installed - you have to uninstall 823559 and rely on your >> firewall to stop the virus. >> Microsoft no loger support NT4 Worstation so refuse to fix the problem. >The original poster said he got the Blaster virus previously, and it's >specific to Windows 2000 and XP, so he ain't using NT4. Hmm. AFAIK NT 4 does share the RPC etc. defects, though not sure whether the exploits coded for NT 5.x will work (i.e. infect) or just crash the system. Also not sure that there aren't malware (possibly Lovesan variants) that do infect NT 4. There's a tendency to lump all RPC-exploiters as "Blaster" - though the subject line shows a specific awareness of this and includes all RPC-exploiters - and some use alternate means of spread. For example, SDbot.RPC.A can be caught on a Win9x via MIRC etc., even though the RPC add-on for Win9x doesn't share the same holes as NT's RPC. >------------------------- ---- --- -- - - - - Kick-Butt Support! Call us, explain the problem, and we'll pop right over and kick your butt. >------------------------- ---- --- -- - - - -
Technical Details
Message-ID:
<7efdpvgvdfpsvfmuemlj2pkju4bc31lemj@4ax.com>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!news.tele.dk!news.tele.dk!small.news.tele.dk!newsgate.cistron.nl!skynet.be!skynet.be!infeed.is.co.za!feeder.is.co.za!uunet.co.za!news1.mweb.co.za!196.3.243.101References:
<3f950101@news.comindico.com.au> <mnnlb.160824$bo1.113551@news-server.bigpond.net.au> <Matthew.Kirkcaldie-BE3498.15043422102003@seagoon.newcastle.edu.au>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fcd68,e0148b89e1d6791 X-Google-Attributes: gidfcd68,public X-Google-Thread: 10d683,e0148b89e1d6791 X-Google-Attributes: gid10d683,public X-Google-Thread: 108c83,e0148b89e1d6791 X-Google-Attributes: gid108c83,public X-Google-ArrivalTime: 2003-10-23 03:55:03 PST From: "cquirke (MVP Win9x)" <name.goes.here@nospam.iafrica.com> Newsgroups: alt.comp.virus,aus.computers,aus.computers.ibm-pc Subject: Re: URGENT - BLASTER LIKE VIRUS, PC IN CONTINUOUS SHUT DOWN LOOP Date: Thu, 23 Oct 2003 09:08:52 +0200 Reply-To: cquirke.delete@nospam.iafrica.com Message-ID: <7efdpvgvdfpsvfmuemlj2pkju4bc31lemj@4ax.com> References: <3f950101@news.comindico.com.au> <mnnlb.160824$bo1.113551@news-server.bigpond.net.au> <Matthew.Kirkcaldie-BE3498.15043422102003@seagoon.newcastle.edu.au> X-Newsreader: Forte Free Agent 1.93/32.576 English (American) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit NNTP-Posting-Host: 196.3.243.101 X-Trace: 23 Oct 2003 09:04:31 +0200, 196.3.243.101 Lines: 30 Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!news.tele.dk!news.tele.dk!small.news.tele.dk!newsgate.cistron.nl!skynet.be!skynet.be!infeed.is.co.za!feeder.is.co.za!uunet.co.za!news1.mweb.co.za!196.3.243.101