BetaONE will rise again!


View Poll Results: What countermeasures were you using?
None 1 5.88%
Software Firewall only (Zone, Ice, etc list optional) 1 5.88%
Hardware Firewall (router, brand list optional) 3 17.65%
Microsoft Patch (Microsoft Security Bulletin MS03-026) 1 5.88%
Anti Virus software only 2 11.76%
Software Firewall & AV Software 4 23.53%
Hard+Soft Firewall & Anti-Virus SW 2 11.76%
Hard+Soft Firewall & Anti-Virus SW & Patch 3 17.65%
Voters: 17. You may not vote on this poll

Reply
  #1  
Old 12th Aug 03, 08:22 PM
Firefox's Avatar
Firefox Firefox is offline
Administrator
 
Join Date: Jun 2003
Location: State of Shock
Posts: 682
Firefox has disabled reputation
I am curious because of the nature of this worm,  how secure the various countermeasures have been in this recent attack.  Your participation is appreciated.
Reply With Quote
  #2  
Old 12th Aug 03, 08:48 PM
doder doder is offline
Member
 
Join Date: Nov 2001
Posts: 59
doder
you might include "if you DIDN"T get hit by the worm. i use a linux box as router and all ports are closed by default so i am safe unless something brings it in from the outside.
Reply With Quote
  #3  
Old 12th Aug 03, 09:00 PM
RadiationBoy's Avatar
RadiationBoy RadiationBoy is offline
Senior Member
 
Join Date: Aug 2001
Posts: 396
RadiationBoy
Send a message via AIM to RadiationBoy Send a message via MSN to RadiationBoy Send a message via Yahoo to RadiationBoy
i was running norton a/v on this computer and that was it. once i got the worm i just installed the ms patch.
Reply With Quote
  #4  
Old 12th Aug 03, 10:29 PM
billybob3's Avatar
billybob3 billybob3 is offline
Senior Member
 
Join Date: Apr 2003
Location: Earth
Posts: 577
billybob3
Send a message via AIM to billybob3 Send a message via MSN to billybob3
I was only running Norton A/V 2003. But, once the worm hit, it kept wanting to shutdown, in the middle of downloading the damn security update to fix it. BUT, I solved that problem, USING A DOWNLOAD MANAGER :-D Oh ya!
Reply With Quote
  #5  
Old 12th Aug 03, 11:08 PM
sigmazeta314's Avatar
sigmazeta314 sigmazeta314 is offline
Member
 
Join Date: Mar 2002
Location: Fort Worth, Texas
Posts: 75
sigmazeta314
Send a message via ICQ to sigmazeta314 Send a message via AIM to sigmazeta314 Send a message via MSN to sigmazeta314 Send a message via Yahoo to sigmazeta314
I didn't get hit at home or work because of BetaONE.  I was online last night and saw the post about the new worm.  I immediately installed the MS patch and updated my virus scan (Mcafee) and that plus Zone Alarm Pro probably kept me from getting infected.  At work I updated the virus scan and installed the patcha nd no infection there either. 

I read on McAfee's site that most recently updated McAfee Virus Scans would pick up the virus as a variant of another virus and keep you safe anyway.  I don't know about this but I didn't get any infection on the computers I use...of course I am religious about keeping my virus scan DAT's up to date.

I know a tech at Best Buy who has been swamped by people bringing in thier computers with this virus and paying at least $30.00 for the tech's to clean thier systems...which takes about 10 minutes each...and he will be staying there al night tonight to get all the computers done.  What a money maker for similar repair places.

Good luck to everyone.
Reply With Quote
  #6  
Old 13th Aug 03, 12:09 AM
mikeh420's Avatar
mikeh420 mikeh420 is offline
Senior Member
 
Join Date: Nov 2002
Location: Los Angeles, CA, USA
Posts: 222
mikeh420
Send a message via ICQ to mikeh420 Send a message via AIM to mikeh420 Send a message via Yahoo to mikeh420
A friend got hit by the worm yesterday. No Anti Virus prog installed, uses dial-up conn. (no firewall). Tried to install NAV and Mc Afee, virus was deleting files as they were being installed! Both were ended while installing, then nothing. This is a baddie! Next, I'm going to put his HDD in my machine and then scan it. Just updated my virus defs (NAV) and installed MS patch for RPC problem.
Reply With Quote
  #7  
Old 14th Aug 03, 06:51 PM
JacKDynne's Avatar
JacKDynne JacKDynne is offline
Administrator
 
Join Date: Oct 2001
Location: The Past Through Tomorrow
Posts: 1,591
JacKDynne will become famous soon enoughJacKDynne will become famous soon enough
Send a message via MSN to JacKDynne
Didn't get hit at home or at work - software firewall and av at home and hardware firewall at work

Block those ports!

/JD
__________________


Reply With Quote
  #8  
Old 14th Aug 03, 08:27 PM
Bads's Avatar
Bads Bads is offline
BetaONE Supporter
 
Join Date: Jul 2001
Location: Quebec
Posts: 1,710
Bads is an unknown quantity at this point
I was hit by this worm two times yesterday 


After doing a clean install of windows after a format, I came to BetaOne for testing my internet connection. When I was reading about this worm, the window appears saying my PC will shutdown 

I restart and have just the time to download the removal tool from Symantec and my PC shutdown again. I turn off my PC, clean with the removal tool and install an antivirus (NOD) + ZA and after that, I was ok
__________________
Reply With Quote
  #9  
Old 15th Aug 03, 03:06 PM
~*McoreD*~'s Avatar
~*McoreD*~ ~*McoreD*~ is offline
Super Moderator
 
Join Date: Jul 2002
Location: Australia
Posts: 2,902
~*McoreD*~ is an unknown quantity at this point
I was running only norton antivirus 2003 professional. I suddenly woken up at 02:53am because my pc was restarting. My comptuer was vulnerable because even though i knew a worm was hanging around on the net, i couldn't install the MS patch because i didnt know how to install it in xpsp2. (Otherwise i would have no problem).
Couldn't do anything that morning (weekday) and as soon as i came home from work, i disbled msblast.exe from the msconfig > startup.
Now i got norton personall filewall installed. I still havent restarted the pc to manually install the ms patch.
The computer still gets infected by the worm as soon as the firewall is turned off, and i am just surviving by "shutdown -a" thanks to Sephiroth.
I know my computer is still vulnerable.
Reply With Quote
  #10  
Old 16th Aug 03, 06:06 AM
Nemesis's Avatar
Nemesis Nemesis is offline
Senior Member
 
Join Date: Nov 2001
Location: South Carolina, USA
Posts: 191
Nemesis
I was lucky enough in that my anti-virus program caught it in an e-mail from a friend.  I use a Linksys router, McAfee 7.03 Pro, and Kerio Personal Firewall 2.1.5.  I haven't installed the patch from Microsoft yet...
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT +1. The time now is 07:19 PM.


Design by Vjacheslav Trushkin for phpBBStyles.com.
Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.