Exploit Fix for XP/2000

[Grav]

Install it now, it allows someone, anyone, to shut down your comp at will, it's fucking QUEER and happened to me like 5 times before I patched it


Win2k Version: http://www.microsoft.com/downloads/details.aspx?FamilyID=c8b8a846-f541-4c15-8c9f-220354449117&displaylang=en

WinXP Version: http://www.microsoft.com/downloads/details.aspx?FamilyID=2354406c-c5b6-44ac-9532-3de40f69c074&displaylang=en

[kaos]

cool, like they can shut down ur pc without trojaning you?

[Grav]

They can do a lot more than that.

[kaos]

no but i mean can they control ur pc without you dloading any of they're trojand programs?

[Anime-Otaku]

its hella ez to stop the shutdown, run CMD, shutdown -a and that stops it. if you got 56k this helps so you dont shutdown b4 your done dling it.

[uncapped]

Yea, this is so fuckin annoying. Damn M$ for being such fucktards.

[Hades-Knight]

hmm whats the exploit? ^^

[NonGayMan]

OMFG this is happening to me now... err im gonna DL this

[NonGayMan]

I just DLED it now.. everything is fine now.

If you see a blue error message, shut your comp off, get on the internet, and DOWNLOAD IT AND INSTALL ASAP.

[0nyx]

Can you explain more what the blue message says please?

[Grav]

http://zdnet.com.com/2100-1105_2-5062364.html

Dubbed "MSBlast" by its author, the worm is spreading quickly, according to an initial analysis posted to the Internet Storm Center, a digital threat-tracking site. Ever since mid-July, when Microsoft announced a vulnerability in a widespread component of Windows, security experts have been waiting for some online vandal to create a worm that takes advantage of it.

http://zdnet.com.com/2100-1105_2-5062655.html?tag=fdfeed

The worm, which security experts believe started spreading early Monday, scans for vulnerable computers so widely that an unpatched Windows XP computer on the Internet could be infected in as little as 25 minutes, according to Symantec studies.

[Doofus_AW]

It hit me last night too, patch fixed it right up.

[NonGayMan]

omfg it happened today again.. but i think i fixed it.

[BlueCube]

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

Symantec says to block TCP port 4444. I did this as soon as I read that - I'm patched already (since June, probably, I get all the critical updates), but extra security never hurts.

As far as I can tell, it tries 3x to get through a particular computer, then quits. So, in the below case, 4 computers tried scanning my 4444 port in a span of a few minutes. They were also all on my ISP, which apparenty also is a characteristic of this worm.

http://www.iownjoo.com/freeimghost/imps/firewall.jpg