Korean Job Discussion Forums

denz · Last edited by denz on Mon Aug 11, 2003 10:08 pm; edited 1 time in total

for anyone getting hit by that "60 second shut down" blast worm for windows XP, here is the remedy supplied by god (korean versions of XP only). you might have to change your encoding to korean to read this:

(1) install this patch: http://download.microsoft.com/download/e/3/1/e31b9d29-f650-4078-8a76-3e81eb4554f6/WindowsXP-KB823980-x86-KOR.exe

(2) it will reboot your computer after completing installation.

(3) after reboot. hit ctrl + alt + del => and terminate the "msblast.exe" program.

(4) then go to �� (start menu of Windows) => �� => type 'regedit' and hit enter. then registry window will pop up.

(5) browse to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (delete "windows auto update" / msblast.exe) if you find it.

denz public service announcement brought to you by god's short shorts.

english versions go here:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MSBLAST.A

denz · Posted: Mon Aug 11, 2003 8:51 pm Post subject:

or vote no like a suuuuuuuuucker!

denz

mishlert · Joined: 13 Mar 2003 Location: On the 3rd rock from the sun

The scary thing about the worm is that it allows an attacker to gain full access and execute any code on a target machine, leaving it compromised.
Source: Trend Micro

denz · Posted: Mon Aug 11, 2003 10:17 pm Post subject:

yesh indeed.

ibm (workplace of god) got hit this morning. those smart girls and boys at big blue nailed it pretty quick though:

there was a rat in the deep end, but we got 'im.

denz

the_beaver · Joined: 15 Jan 2003

The computer at work was hit with this very virus today and tomorrow I can fix it. Denz, you rock.

Wombat · Joined: 28 May 2003 Location: slutville

I use a Mac! CHUMPS!

Wombat the Crafty.

camel96 · Guest

Kind of serves me right for not paying attention to other threads I guess. Evil or Very Mad

Walter Mitty · Joined: 27 Mar 2003 Location: Tokyo! ^.^

Bulsajo · Joined: 16 Jan 2003

My home pc is sitting pretty, but at work.... this system is so full of bugs and crap I doubt one more worm would even be noticed... Confused

rudyflyer · Joined: 26 Feb 2003 Location: pacing the cage

question:
I'm running Norton Internet security and have my personal firewall up. Will I be OK?

FlagWaver · Joined: 12 Apr 2003

Add this to your reading list people.

http://isc.sans.org/diary.html?date=2003-08-11

FlagWaver · Joined: 12 Apr 2003

Rudy,

Our customers run a business class firewall and are getting hit constantly.

rudyflyer · Joined: 26 Feb 2003 Location: pacing the cage

thanks flag waver, i've installed updates from synamtec and microsoft and am now doing a complete system scan

kangnamdragon · Joined: 17 Jan 2003 Location: Kangnam, Seoul, Korea

this might sound dumb, but I got the worm and wonder how to fix it in the 60 seconds before my computer restarts itself again. Is this possible?

I guess my question is: How do I kill the worm if I already have it? Crying or Very sad

Zyzyfer · Posted: Tue Aug 12, 2003 8:14 pm Post subject:

:B nerdalert nerdalert nerdalert :B

mishlert's avatar is Goenitz(pronounced gay knits) from King of Fighters '96. Just when I thought GirlFromMars was the only person brave enough to sport a KoF character.

:B nerdalert nerdalert nerdalert :B