Forum Home
Press F1
 
Thread ID: 36540 2003-08-12 22:55:00 Keep up with your patches - RPC worm spreading fast PressF1 User (1065) Press F1
Post ID Timestamp Content User
167274 2003-08-12 22:55:00 Seems this RPC worm is getting quite a bit of press......

www.theregister.co.uk

In typical Microsoft style -' Terry Allen, of Microsoft New Zealand, says that while there is no known attack in progress, the company believes this may occur in the near future'.... ummm excuse me Sir but you might want to read the computer forums!! It seems that August 16 will be the wake up call...

xtramsn.co.nz

Cheers PF1 :-)
PressF1 User (1065)
167275 2003-08-13 00:21:00 From computerword

Business as usual for virus despite trustworthy computing (computerworld.co.nz)
stu140103 (137)
167276 2003-08-13 00:24:00 > In typical Microsoft style -' Terry Allen, of
> Microsoft New Zealand, says that while there is no
> known attack in progress, the company believes this
> may occur in the near future'.... ummm excuse me Sir
> but you might want to read the computer forums!! It
> seems that August 16 will be the wake up call...

What's so wrong about what he said? He's being honest.

Mike.
Mike (15)
167277 2003-08-13 03:45:00 Mike - there's nothing wrong with being honest (Microsoft?) and the comment wasn't meant to upset anyone but it is very clear that this worm is indeed infecting machines at an alarming rate (plenty of posts to this forum alone) and has been doing so over the past week. The PC Company has obviously felt strongly enough about this fact to have sent out a newsletter to it's users advising about it and how to remove the worm. Someone in the responsible position as Terry Allen should be better informed to new infections before making such comments (which were posted on the Xtra home page) for all to see, and thus according to him, users post no threat from something that is indeed infecting many many users through NZ and the world.

Cheers PF1 :-)
PressF1 User (1065)
167278 2003-08-13 11:11:00 > Mike - there's nothing wrong with being honest
> (Microsoft?) and the comment wasn't meant to upset
> anyone but it is very clear that this worm is indeed
> infecting machines at an alarming rate (plenty of
> posts to this forum alone) and has been doing so over
> the past week. The PC Company has obviously felt
> strongly enough about this fact to have sent out a
> newsletter to it's users advising about it and how to
> remove the worm. Someone in the responsible position
> as Terry Allen should be better informed to new
> infections before making such comments (which were
> posted on the Xtra home page) for all to see, and
> thus according to him, users post no threat from
> something that is indeed infecting many many users
> through NZ and the world.

I think you have misunderstood Terry Allen's comments, and what he was referring to when he mentions "attacks".

Mike.
Mike (15)
167279 2003-08-13 12:10:00 I knew there was a reason I kept W98SE.
Lucky the designers of these worms cant be bothered with messing around with 95 and 98.

;)

tedheath
tedheath (537)
167280 2003-08-13 12:29:00 i'm a bit mixed up now, will a firewall prevent the worm from enterring ur computer? Cos when i read the precautions on the MS site, they dont mention using a firewall to protect urself.

cheers,
v.K
vk_dre (195)
167281 2003-08-13 22:13:00 (1) Sorry Mike but attack means attack which ever way you look at it. Weather its against the Microsoft site on the expected August 16 date or against the home or business user as at present. There clearly has been an 'attack' in progress which has been clearly obvious by the way in which help lines (0800) and forums have been trying to deal with this ongoing problem. However upon saying that I see that Mr Terry Allen has now become much more vocal in addressing the severity of this threat, as seen on both TV 1 and TV 3 News last night, and heard on National Radio News.

(2) Good point tedheath but I think this is just the latest security hole to be picked up by a sorry hacker. Fingers crossed that '98 will remain unaffected by threats but past experience has shown us otherwise.

(3) Yes vk_dre - according to information put out on several forums a firewall (properly configured) will indeed help prevent this worm from entering, or exiting the system. Windows XP has the ICF (internet connection firewall), which can be turned on. Zonealarm will notify of both inbound and outbound traffic if the program hasn't been given access rights (that is, if the msblast.exe tries to connect to the internet)
The actual setting for ICF in XP is found in Start + Settings + Network Connections + right click your connection icon and choose properties + click the advanced tab + click in the Internet Connection Firewall box (to turn it on).

Cheers PF1 :-)
PressF1 User (1065)
167282 2003-08-13 22:14:00 > will a firewall prevent the worm from enterring ur computer?

Yes, if you have set the firewall to block Port 135 from TCP traffic. Have a look at Agent's thread (pressf1.pcworld.co.nz) for more ports that may be worth blocking.
Susan B (19)
167283 2003-08-13 22:31:00 >
> I knew there was a reason I kept W98SE.
> tedheath
>
>
>
Me too ............
TonyF (246)
1 2 3