Re: Hacker or Virus???

From: Bruce Chambers (bchambers_at_nospamcableone.net)
Date: 09/27/03


Date: Sat, 27 Sep 2003 11:58:31 -0600


Greetings --

    If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger

Bruce Chambers

--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
You can have peace.  Or you can have freedom.  Don't ever count on
having both at once. -- RAH
"Eric Rosenwinkel" <e.rosenwinkel@verizon.net> wrote in message
news:106e201c38368$72cb2820$a601280a@phx.gbl...
> Last night I had my DSL connection open and had stepped
> away from the computer when suddenly I saw an alert come
> up saying the system was shutting down.  A timer was
> counting down from 1 minute, saying save all work, etc.
> Then a box appeared saying 'some Windows XP files were
> being overwritten by unrecognized versions, you may need
> to insert your Windows XP installation disk.'  The system
> shut down and when it restarted everything seemed normal
> except that it shut down again the same way within about 3
> minutes (this time the DSL connection wasn't logged on).
> I reinstalled Windows XP (actually I selected the 'repair'
> option) and when it finished, I logged on as a different
> user (not administrator) and things seemed ok, except that
> my DSL network connection icon had disappeared in the
> Network Connections panel.  I wasn't able to set it up
> again so I 'switched users' to the original administrator
> user account.  On that desktop I had a shortcut to my DSL
> connection but it didn't work.  Again, the DSL network
> connection icon was missing in the Network Connections
> panel so I called my ISP tech assistance line.  While on
> the phone with them, they instructed me to reboot and
> after I did that, ALL icons were missing in the Network
> Connections panel.  About 30 seconds later, the system
> shut down on it's own as above.  When the dialogue box
> saying it was replacing Windows files appeared, I simply
> turned off the power and it remains off for the moment.
>
> My computer is not on a network.  It's the only computer
> in my home.  I don't open attachments I don't expect - I
> even have the preview pane turned off.  However, I did not
> have anti-virus software installed at the time and I did
> have the telnet service activated, under Administrator
> services.
>
> Could this be the work of a hacker, or does it sound like
> a virus?  Any advice would be appreciated.
>
> Thanks!


Relevant Pages

  • Re: Problem: No Network Connections using Guest Account
    ... Problem I'm experiencing is that the guest account does not show any of the ... I'm using DSL without a problem with my administrator account. ... be able to add this nextwork connection to my guest account. ... when I log onto the Guest account and look under Network Connections ...
    (microsoft.public.windowsxp.network_web)
  • Hacker or Virus???
    ... >counting down from 1 minute, saying save all work, etc. ... >minutes (this time the DSL connection wasn't logged on). ... >connection icon was missing in the Network Connections ...
    (microsoft.public.windowsxp.security_admin)
  • Hacker or Virus???
    ... counting down from 1 minute, saying save all work, etc. ... minutes (this time the DSL connection wasn't logged on). ... Network Connections panel. ...
    (microsoft.public.windowsxp.security_admin)
  • Hacker or Virus???
    ... >counting down from 1 minute, saying save all work, etc. ... >minutes (this time the DSL connection wasn't logged on). ... >connection icon was missing in the Network Connections ...
    (microsoft.public.windowsxp.security_admin)
  • Hacker or Virus???
    ... counting down from 1 minute, saying save all work, etc. ... minutes (this time the DSL connection wasn't logged on). ... Network Connections panel. ...
    (microsoft.public.windowsxp.security_admin)