MexConnect.com Forums: Specific Focus: Technical Mexico: W32 Blaster Worm: Page 2

Forums > Specific Focus > Technical Mexico

1 2 View All

esperanza

Aug 19, 2003, 1:15 PM

Post #26 of 32 (794 views)

Shortcut

Re: [RexC] W32 Blaster Worm / Got another one today

Can't Post | Private Reply

AHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA! I remember that from Norton 2002, now that you mention it.

I have 2003, and it IS different. Puzzle solved, case closed.

http://www.mexicocooks.typepad.com

johanson / Moderator

Aug 19, 2003, 2:46 PM

Post #27 of 32 (787 views)

Shortcut

Re: [RexC] W32 Blaster Worm / Got another one today

Can't Post | Private Reply

I just received a call from a Symantec (Norton) Rep asking if I had had any problems with this worm. I was in total shock. Why would they phone me? And then I remembered a form I had filled out when attempting to get extra virus/worm/Trojan Horse information from Norton a few days ago where, when I was asked what my profession was, I mentioned that I was a tech advisor for an ISP (I attempt to answer the support mail for Lagunanet which doesn’t really make me a tech advisor) and that I write for the Guadalajara Reporter (I didn’t mention that it was a weekly newspaper and that my one article per week, “Tech Talk” is only about 460 words long). I forgot to mention my real profession, that of being a fascist :) landlord in downtown Seattle.

Well anyway when I asked him about the automatic update option, he said yes your computers query Symantec at least once per day. I asked what time. He did not sound very sure when he answered, each night at midnight, it was almost as if he was guessing. I responded by saying most folks are not on line each night at midnight. He responded by stating that if the computer did not get through that night that it would try to check the first thing in the morning. That goes along with Rex's comments about seeing the icon flashing when he went on line this Tuesday morning.

jrice

Aug 19, 2003, 4:01 PM

Post #28 of 32 (782 views)

Shortcut

Re: [johanson] W32 Blaster Worm

Can't Post | Private Reply

Agreed, the person(s) who wrote the thing are to blame. Microsoft, as the dominant software, also dominates the target list. Microsoft programs are virus magnets just because they are so common. You use that enormously attractive Outlook, you are going to spend 15 percent of your computer time fishing to updates and corrections or you are going to be infected.

Microsoft, however, has -- perhaps not a bad record, but a less than excellent one in ensuring that its patches do not themselves cause problems.

Windows XP also is not nearly as stable as advertised. The tech department at my company loathes it. When I went back to our techs to ask if I should get Win 2K or XP PRO on my computer, three people said at the same moment: 2000!

According to Dvorak, the most interesting columnist for PC Magazine, Gates recently said that 5% (not much) of XP users crash twice a day (on average, still astonishingly awful).

Don

Aug 19, 2003, 4:38 PM

Post #29 of 32 (778 views)

Shortcut

Re: [RexC] W32 Blaster Worm / Got another one today

Can't Post | Private Reply

I use Nortons also and have received about 30 to 40 updates since August 1. I get them automatically. Once in a while I check with Nortons for updates, but usually there are none as I have already received them automatically. They come on all days, not just Wednesdays.

esperanza

Aug 19, 2003, 4:44 PM

Post #30 of 32 (775 views)

Shortcut

Re: [jrice] W32 Blaster Worm

Can't Post | Private Reply

I have used XP Home Version for about 18 months. I have a dedicated dial-up line for it and it's on from about 7:00AM till about midnight, seven days a week...it is, I'm not sitting here all that time, thank god. It never crashes.

I thought we had an answer for the Norton Puzzle. Apparently not. Johanson, why don't you ask that guy if he should call you back?

http://www.mexicocooks.typepad.com

johanson / Moderator

Aug 19, 2003, 5:19 PM

Post #31 of 32 (772 views)

Shortcut

Re: [esperanza] W32 Blaster Worm

Can't Post | Private Reply

God if I only could figure out a way to get him to call me back. Changing the subject. Maybe I am missing something, but you seem to be a perfect upgrade candidate for broadband. What does your second line cost you? $25 per month? What are you paying your ISP for your telephone connection, $20 per month?

As I recollect you live in the village south of the main road. I bet you have a line of site view of the Lagunanet wireless transceivers. You could sign up for a 128 Kb/sec connection for $40 per month and get rid of one of your telephone lines.

I've done some download speed tests from a server in Dallas and would average about 20 to 29 Kb/sec with my 33.6 telephone ISP connection and closer to 100 to 110 Kb/sec at 128 Kb/sec. What's that 3 to almost 6 times faster? (256Kb/sec is $60 per month)

There is a catch though, you have to pay for the hardware and installation costs, which today are usually $450 for a Tower and slightly less for most laptops

Don

Aug 19, 2003, 5:33 PM

Post #32 of 32 (768 views)

Shortcut

Re: [esperanza] W32 Blaster Worm

Can't Post | Private Reply

Esperanza, I too have Nortons 2003. Below is a list of updates I have received since August 1. It lists the virus and gives 2 dates. The first date is the date the virus was discovered and the second date shows when I was protected.

Sobig.F [F-Secure], W32/Sobig.f@MM [McAfee], WORM SOBIG.F [Trend] August 19, 2003 August 19, 2003

W32.Welchia.WormW32/Welchia.worm10240 [AhnLab], W32/Nachi.worm [McAfee], WORM_MSBLAST.D [Trend], Lovsan.D [F-Secure] August 18, 2003 August 18, 2003

BAT.Randren August 16, 2003 August 18, 2003

W32.Dumaru@mm August 16, 2003 August 18, 2003

W32.Randex.H August 16, 2003 August 18, 2003

W32.HLLW.Shydy.B August 16, 2003 August 18, 2003

Trojan.Analogx August 15, 2003 August 18, 2003

PWSteal.Lemir.CTrojan.PWS.Legendmir.s [KAV], PWS-LegMir [NETA] August 15, 2003 August 18, 2003

W32.BugsoftBloodhound.W32.VBWORM August 15, 2003 August 18, 2003

W32.Randex.GW32/Randex.worm.c [McAfee], Backdoor.SdBot.gen [KAV] August 14, 2003 August 15, 2003

W32.Randex.FBackdor.IRCBot.gen [KAV], W32/Sluter.worm [McAfee] August 14, 2003 August 14, 2003

W32.Kuskus.Worm August 14, 2003 August 14, 2003

Backdoor.Graybird.EBackdoor.Graybird.g [KAV], Troj/Graybird-A [Sophos] August 14, 2003 August 14, 2003

Backdoor.Beasty.HBackDoor-AMQ [McAfee] August 13, 2003 August 14, 2003

VBS.Lembra@mm August 13, 2003 August 13, 2003

W32.Blaster.C.WormW32/Blaster-B [Sophos], W32/Lovsan.worm.b [McAfee], Win32.Poza.B [CA] August 13, 2003 August 13, 2003

W32.Blaster.B.WormWORM_MSBLAST.B [Trend], Win32.Poza.C [CA], W32/Lovsan.worm.c [McAfee], Worm.Win32.Lovesan [KAV] August 13, 2003 August 13, 2003

W32.HLLW.Habrack August 12, 2003 August 13, 2003

W32.Randex.EIRC-BBot [McAfee], WORM_RPCSDBOT.A [Trend] August 12, 2003 August 13, 2003

W32.Blaster.WormW32/Lovsan.worm.a [McAfee], Win32.Poza.A [CA], Lovsan [F-Secure], WORM_MSBLAST.A [Trend], W32/Blaster-A [Sophos], W32/Blaster [Panda], Worm.Win32.Lovesan [KAV] August 11, 2003 August 11, 2003

Backdoor.WinShell.50.bBackDoor-TC (McAfee). August 11, 2003 August 11, 2003

PWSteal.Pport August 10, 2003 August 11, 2003

W32.Bacterra.WormWorm.P2P.Bacterra.a [AVP] August 10, 2003 August 11, 2003

VBS.DDV.B August 8, 2003 August 11, 2003

PWSteal.Lemir.BPWS-Organer [McAfee] August 8, 2003 August 11, 2003

W32.Mant.WormWorm.P2P.Milcan [KAV], W32/Milcan.worm!p2p [McAfee] August 8, 2003 August 11, 2003

BAT.Rous.wormI-Worm.Rous.A [KAV] August 8, 2003 August 11, 2003

W32.HLLW.MoegaBackdoor.Sdbot.gen [KAV], W32/Sdbot.worm.gen [McAfee] August 8, 2003 August 8, 2003

W32.HLLW.Antinny August 8, 2003 August 8, 2003

Backdoor.OptixPro.12.cBackdoor.Optix.Pro.12 [KAV], Backdoor.Optix.1_2 [RAV], BackDoor-ACH [McAfee] August 8, 2003 August 8, 2003

W32.Sowsat.C@mm August 7, 2003 August 8, 2003

Backdoor.IRC.Flood.G August 7, 2003 August 8, 2003

W32.Nuffy.AW32.Nuf.A, Worm.Win32.Nuf [KAV] August 7, 2003 August 7, 2003

W32.HLLW.Tofaced August 6, 2003 August 7, 2003

W32.Sowsat.B@mmI-Worm.Sowsat.f [KAV] August 6, 2003 August 7, 2003

Trojan.Stealther.BTrojan.Stealther, Trojan.Win32.Stealther [KAV] August 6, 2003 August 7, 2003

Backdoor.WinShell.50Backdoor.Winshell.50 [KAV], BackDoor-TC [McAfee] August 5, 2003 August 7, 2003

Backdoor.Sdbot.NBackdoor.SdBot.gen [KAV] August 5, 2003 August 6, 2003

W32.HLLW.NiklasWorm.P2P.Niklas [KAV], W32/MScr.worm!p2p [McAfee] August 5, 2003 August 6, 2003

W32.Kergez.A@mmI-Worm.Kergez [KAV] August 5, 2003 August 6, 2003

Backdoor.HaleBackDoor-ATM.dr [McAfee] August 5, 2003 August 6, 2003

Backdoor.Lala.CBackDoor-YQ [McAfee] August 5, 2003 August 6, 2003

Backdoor.Beasty.drTrojanDropper.Win32.Yabinder.a [KAV], Multidropper-CQ trojan [McAfee] August 5, 2003 August 6, 2003

Backdoor.IRC.Flood.F August 4, 2003 August 5, 2003

Downloader.Mimail August 4, 2003 August 5, 2003

W97M.Anumps.A August 4, 2003 August 4, 2003

Backdoor.IRC.CirebotWin32.RPC.A [CA], Worm.Win32.Autorooter.a [KAV], Backdoor.IRCBot.gen [KAV], Exploit.Win32.DCom.b [KAV], Downloader-DM [McAfee], W32/Lolol.worm.gen [McAfee], Exploit-DcomRpc [McAfee] August 2, 2003 August 4, 2003

Backdoor.Sumtax August 1, 2003 August 1, 2003

W32.Mimail.A@mmWORM_MIMAIL.A [Trend], W32/Mimail@MM [McAfee], Win32.Mimail.A [CA], W32/Mimail-A [Sophos], I-Worm.Mimail [KAV] August 1, 2003 August 1, 2003

1 2 View All