🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: alt.comp.virus
Article #34

Re: URGENT - BLASTER LIKE VIRUS, PC IN CONTINUOUS SHUT DOWN LOOP

#34
From: cquirke (MVP Win9x)
Date: Thu, 23 Oct 2003 07:08
30 lines
2713 bytes
On Wed, 22 Oct 2003 15:04:34 +1000, Matthew Kirkcaldie 
>In article <mnnlb.160824$bo1.113551@news-server.bigpond.net.au>,
> "Michael" <mixstatdonotspam@bigpond.net.au> wrote:

>> If you are using NT4 Workstation (not Server) it crashes after patch 823559
>> and 823980 are installed - you have to uninstall 823559 and rely on your
>> firewall to stop the virus.  

>> Microsoft no loger support NT4 Worstation so refuse to fix the problem.

>The original poster said he got the Blaster virus previously, and it's 
>specific to Windows 2000 and XP, so he ain't using NT4.

Hmm.  AFAIK NT 4 does share the RPC etc. defects, though not sure
whether the exploits coded for NT 5.x will work (i.e. infect) or just
crash the system.  Also not sure that there aren't malware (possibly
Lovesan variants) that do infect NT 4.

There's a tendency to lump all RPC-exploiters as "Blaster" - though
the subject line shows a specific awareness of this and includes all
RPC-exploiters - and some use alternate means of spread.  For example,
SDbot.RPC.A can be caught on a Win9x via MIRC etc., even though the
RPC add-on for Win9x doesn't share the same holes as NT's RPC.



>------------------------- ---- --- -- - -  -    -
   Kick-Butt Support!  Call us, explain the problem,
   and we'll pop right over and kick your butt.
>------------------------- ---- --- -- - -  -    -
Technical Details
Message-ID: <7efdpvgvdfpsvfmuemlj2pkju4bc31lemj@4ax.com>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!news.tele.dk!news.tele.dk!small.news.tele.dk!newsgate.cistron.nl!skynet.be!skynet.be!infeed.is.co.za!feeder.is.co.za!uunet.co.za!news1.mweb.co.za!196.3.243.101
References: <3f950101@news.comindico.com.au> <mnnlb.160824$bo1.113551@news-server.bigpond.net.au> <Matthew.Kirkcaldie-BE3498.15043422102003@seagoon.newcastle.edu.au>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fcd68,e0148b89e1d6791
X-Google-Attributes: gidfcd68,public
X-Google-Thread: 10d683,e0148b89e1d6791
X-Google-Attributes: gid10d683,public
X-Google-Thread: 108c83,e0148b89e1d6791
X-Google-Attributes: gid108c83,public
X-Google-ArrivalTime: 2003-10-23 03:55:03 PST
From: "cquirke (MVP Win9x)" <name.goes.here@nospam.iafrica.com>
Newsgroups: alt.comp.virus,aus.computers,aus.computers.ibm-pc
Subject: Re: URGENT - BLASTER LIKE VIRUS, PC IN CONTINUOUS SHUT DOWN LOOP
Date: Thu, 23 Oct 2003 09:08:52 +0200
Reply-To: cquirke.delete@nospam.iafrica.com
Message-ID: <7efdpvgvdfpsvfmuemlj2pkju4bc31lemj@4ax.com>
References: <3f950101@news.comindico.com.au> <mnnlb.160824$bo1.113551@news-server.bigpond.net.au> <Matthew.Kirkcaldie-BE3498.15043422102003@seagoon.newcastle.edu.au>
X-Newsreader: Forte Free Agent 1.93/32.576 English (American)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
NNTP-Posting-Host: 196.3.243.101
X-Trace: 23 Oct 2003 09:04:31 +0200, 196.3.243.101
Lines: 30
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!news.tele.dk!news.tele.dk!small.news.tele.dk!newsgate.cistron.nl!skynet.be!skynet.be!infeed.is.co.za!feeder.is.co.za!uunet.co.za!news1.mweb.co.za!196.3.243.101