MSBlast is no fun!

Sorry I left all of a sudden, yesterday, althought I did have just long enough to explain a little. Suddenly, poof, computer goes bye bye. I think I got it taken care of though. Has anyone else had the experience of MSBlast yet? It's not HORRIBLE, but really annoying.

That was kind of funny to see in world Dio (although it absolutely sucks that you got it obviously).


You said "Uh, oh, I think I have MBlast". Followed by your Av going AWAY, and then offline in a span on 10 secs

Flea and I didn't expect to see you on again last night after that exit

-Bone

m-kay, if anyone sees this and thinks they too have it, go to this thread: New Worm called mblaster

You better enjoy it too, becuase I just typed out that entire hyperlink... Do macs not do copy/paste of URLs? I only got a box when I tried (I'm at school)

I got it ...well all 3 of my computers got it how i dont know.....

really annoying doesnt even begin to describe it

This worm only requires that you be connected to the internet and that your windows not be fully patched. It scans for a specific port, activates a service on your computer and downloads the virus on a seperate port.

It uses a buffer under run or over run bug.

Who wants to know what a buffer under run or over run is?

A buffer is a set of data where one system is writing to it (putting stuff in) and one system is reading from it (taking stuff out). It is used to equalize differences in speed between operations or hardware and to speed things up. An over-run is when the writing system is allowed to keep writing past the end of the allocated space and into memory it should be in. An under-run is when the reading system keeps pulling out data that isn't there and thus reads back past the begining of the buffer.

what should happen is that whatever is holding or controlling the buffer shouldn't allow anything to go past it.

Instead programs can use these errors to access parts of memory they aren't supposed to access to store or run code in a malicious way.

This was an extremely bad case because the buffer over / under run was connected to an open internet port. All the virus has to do to spread is search for computers with the right port open, communicate with that computer in the right way to put data where it shouldn't be / run extra code. It activates an FTP service that downloads the virus to your computer and sets your computer to start that program each time it starts.

Macs do copy and paste. the key where alt should be + C for copy, Key where alt should be + V for paste.

And unfortunately the patch for the problem MSBLAST exploits has been around for over a month now. For those of you not familiar with windows update, i'd suggest you run it atleast once a month.

This low tech resident of SL thanks you from the bottom of her heart for your explanation.

Sign me: Enjoying learning more.

The bad part was, I went to the update site, and said, "Nah... I never get infected with anything anyway" about 10 minutes before it happened I'm all patched up now though