Help me - I have a worm

[basemies]

I had this happen earlier today, and it took several frantic attempts before the computer shut down to find the patch and install it. It would have never happened, but last night I set up a DMZ host to see if that would allow me to connect to battle.net. After I installed the patch, everything was back to normal. I promptly installed the patch on the 2 other computers on the network and I haven't had any trouble since.

[Wolffen]

The virus comes through port 135 via RPC. If you don't run firewall software, get some. I know a lot of people like Zone Alarm. I prefer Sygate Personal Firewall:
http://downloads-zdnet.com.com/3000-...ml?tag=lst-0-1

If you haven't been hit, run Windows update and apply the patch (or go to the link Abobo posted to get just the one fix). This worm is just the start of this. I can see something along the lines of the SQL Slammer or worse coming in the near future if people don't get their machines patched (and they won't cause they won't know how). I also found out that just because you're not on a broadband connection, doesn't mean you can't get the worm. One of my extremely computer illiterate users (a regional sales guy, works from home) got it, and the only way he connects to the net is via AT&T Global Dialer.

[voltz]

If you plan to do the format, instead of doing it through the installation disk, you're best off making a boot floppy so you can access dos directly. Then from there, remember which number your harddrive was and type format so you'll have a clean erase.

Best thing to do for saving your data is have an extra harddrive handy for putting junk on so you can put in your stuff like videos, pics, gamesaves (very important unless you want to work though all that again, plus re-downloading from gamespy sucks!), porn etc etc. There's some 2.5gig harddrives you can hook into USB if you want the cheap route, they sell for $35 last time I checked.

[Jeremy]

http://www.sarc.com/avcenter/venc/da...ster.worm.html could help you out. Also, Scott Keith's Raw Rant on 411mania has a lot of info on this. http://www.411mania.com/wrestling/tv...eports_id=1248

[Dyne]

just to answer some questions directed to me. i never have system restore on in the first place. i find it useless and takes up space. also yes i got the NT error, and finally i applied the patch like it says and i still get the error. eh......what a waste this is.

[station82o]

finally - things are going ok, it was really my own fault (well.. the worm wasn't) but my stupid lack of security was no one's fault but my own. I got a firewall enabled now and things are ok.... thanks to the people on this thread and extra special fucken thanks to both Lhadhatt and Tracer - and a shout out to LiFOR - they helped me bigtime today.

Heres to hoping someone kills the bastard that started all this crap.

[James]

Can I just say here that I love each and every one of you posting on this thread? My PC just started doing this yesterday and I've been ready to throw it through the window and laugh maniacally as it hits the pavement below. I now have a way to track things down and fix it, if I'm lucky, so you better all believe I'm a lot happier now than I was 10 minutes ago.

I'm writing this on a friend's PC right now. Old and slow and it doesn't shut down 2 minutes after booting.

James

[station82o]

firewall and dmz - make sure the dmz is disabled

also - check your ports at www.grc.com

[Brisco Bold]

Thank you guys for posting the patch. I thought it seriously I thought it was my shitty Dell, or my sister's chronic Kazaa binges fucking up the system.

[hayato42]

hmm crap my comp is infected...

trying out the windows update patch.