• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

CNN Reporting computer problems...

Page 2 - Seeking answers? Join the AnandTech community: where nearly half-a-million members share solutions and discuss the latest tech.
Originally posted by: spidey07
Originally posted by: Jnetty99
CNN saying now, that it might be a different virus and not the Zotob virus

Interesting...

They releasing these worms faster and faster.


So there is a possibility that all of us might not be protected,,, i guess we will see but i'm not turning off my computer running XP.
 
Originally posted by: mAdMaLuDaWg
wow.. they are making it sound like the end of the world.

all it would take would be a really nasty one to wipe out at least half of the world's computers.
 
Originally posted by: spidey07
Originally posted by: mAdMaLuDaWg
wow.. they are making it sound like the end of the world.

all it would take would be a really nasty one to wipe out at least half of the world's computers.

well...since this virus only affects 2000 machines...very hard to wipe out half the worlds computers, when they said at the bottom of the screen that only 5-8% of windows machines run it...
 
Originally posted by: So
Originally posted by: jumpr
LOLOLOLOLLLLLLLLLLLLLLLL

"Until then, if you are running Windows 2000 out there, you should shut your computer down, Wolf."

😕

My win2k rig is doing niceley behind a real firewall. :shocked:!

Yeap, same here. And I'm running as administrator and nothing is happening.
 
Originally posted by: gar3555
Originally posted by: spidey07
Originally posted by: mAdMaLuDaWg
wow.. they are making it sound like the end of the world.

all it would take would be a really nasty one to wipe out at least half of the world's computers.

well...since this virus only affects 2000 machines...very hard to wipe out half the worlds computers, when they said at the bottom of the screen that only 5-8% of windows machines run it...

Yep... its a really slow news day for CNN I guess
They are over-sensationalizing this.. at first they made it sound as if this happend out of the blue and there was nothing you could do about it. Geez... when u report on something make sure u have ur facts straight :| :|
I bet people who are not as technical savvy as we are are freaking out right now if they are watching CNN
 
You know maybe the virus started at CNN NY and spread to the other CNN locations and also its affiliates, because Fox or MSNBC are not reporting anything on it.
 
Originally posted by: gar3555
Originally posted by: spidey07
Originally posted by: mAdMaLuDaWg
wow.. they are making it sound like the end of the world.

all it would take would be a really nasty one to wipe out at least half of the world's computers.

well...since this virus only affects 2000 machines...very hard to wipe out half the worlds computers, when they said at the bottom of the screen that only 5-8% of windows machines run it...

did you not read?

"All it would take would be a really nasty one to wipe our at least half of the world's computers."

The blasters and nimdas and all the other bad ones spread incredibly fast (exponentially). Luckily they didn't destroy data or systems. But they easily could have.

-edit- this vulnerability is on 2000, 2003, XP.
 
Originally posted by: spidey07
Originally posted by: gar3555
Originally posted by: spidey07
Originally posted by: mAdMaLuDaWg
wow.. they are making it sound like the end of the world.

all it would take would be a really nasty one to wipe out at least half of the world's computers.

well...since this virus only affects 2000 machines...very hard to wipe out half the worlds computers, when they said at the bottom of the screen that only 5-8% of windows machines run it...

did you not read?

"All it would take would be a really nasty one to wipe our at least half of the world's computers."

The blasters and nimdas and all the other bad ones spread incredibly fast (exponentially). Luckily they didn't destroy data or systems. But they easily could have.

misunderstood...thought you were talking about this farce of a virus 🙂
 
Originally posted by: gar3555
Originally posted by: spidey07
Originally posted by: gar3555
Originally posted by: spidey07
Originally posted by: mAdMaLuDaWg
wow.. they are making it sound like the end of the world.

all it would take would be a really nasty one to wipe out at least half of the world's computers.

well...since this virus only affects 2000 machines...very hard to wipe out half the worlds computers, when they said at the bottom of the screen that only 5-8% of windows machines run it...

did you not read?

"All it would take would be a really nasty one to wipe our at least half of the world's computers."

The blasters and nimdas and all the other bad ones spread incredibly fast (exponentially). Luckily they didn't destroy data or systems. But they easily could have.

misunderstood...thought you were talking about this farce of a virus 🙂

heh, well if you look at any of the virus sites it is undergoing some mutation. Getting a little nastier. Won't be long before a variant targets 2000/2003/XP.

 
well...since this virus only affects 2000 machines...
this vulnerability is on 2000, 2003, XP.

Both are true.

Windows 2000, Windows XP, and Windows 2003 Server all have the buffer overflow vulnerability.

However, in order to get to that buffer, Windows XP SP2 and Windows Server 2003 require authentication. The current worm attacks the buffer overflow and doesn't authenticate to the target machine.

Tomorrow, someone might write a variant that does authenticate to the remote computer. WinXP and W2K3 will then be vulnerable to that worm.

Moral: patch your machines. Get MS05-039 deployed.
 
Crap, I forgot to update my htpc running win2k 🙁

I just PCA'd into it, it's been rebooted. I just ran windows update. Are there any symptoms? It is behind a linksys router, so maybe it's ok?
 
I started auditing this in the firewall yesterday. Check your firewall and router ACL entries and block the following ports if possible:

INBOUND = TCP 445
OUTBOUND = TCP 1117, TCP 6666, TCP 6667, TCP 8080 and TCP 33333

The INBOUND port is the common method of infection for the worm, the OUTBOUND ports are the means with which the virus "phones home."

ABC News was also announcing that they were hit as well a few minutes ago.
 
Originally posted by: NogginBoink
well...since this virus only affects 2000 machines...
this vulnerability is on 2000, 2003, XP.

Both are true.

Windows 2000, Windows XP, and Windows 2003 Server all have the buffer overflow vulnerability.

However, in order to get to that buffer, Windows XP SP2 and Windows Server 2003 require authentication. The current worm attacks the buffer overflow and doesn't authenticate to the target machine.

Tomorrow, someone might write a variant that does authenticate to the remote computer. WinXP and W2K3 will then be vulnerable to that worm.

Moral: patch your machines. Get MS05-039 deployed.

Are you sure? Lots of times these buffer overflows (most dangerous) just have to hit a port without any authentication.
 
Originally posted by: Fingolfin269
Yah, they took our servers down at my company today due to some impending virus of death, doom, and destruction.

Hmmm...take the servers down rather than mitigate the risk through other means. How much does your entire IT staff get paid combined? I'll do the job by myself for half the cost if they're that stupid.
 
Originally posted by: SagaLore
http://www.antisource.com/article.php/plug-play-zotob

What is sad is that they have had a week to patch their systems, and all of these big media companies that heavily rely on their IT have been let down. What I'm reading is that it only took 90 minutes for them to bring the systems back up. Wasn't really newsworthy until it happened to the news companies. 😛

well in many corporate cultures you can't make a change without change control.

This can sometimes take two weeks for approval, by policy. (thank you Mr. Sarbane and Mr. Oxley)

Patching 1000s of servers is no easy task and will disrupt service.
 
Originally posted by: Rogue
I started auditing this in the firewall yesterday. Check your firewall and router ACL entries and block the following ports if possible:

INBOUND = TCP 445
OUTBOUND = TCP 1117, TCP 6666, TCP 6667, TCP 8080 and TCP 33333

The INBOUND port is the common method of infection for the worm, the OUTBOUND ports are the means with which the virus "phones home."

ABC News was also announcing that they were hit as well a few minutes ago.

bookmarked
 
Originally posted by: FeuerFrei
Anybody write software for Win 98 anymore??? If not, yay for me.

Fixed. 😉

Actually this virus does spread to Win98 machines. It just doesn't do any harm - instead, it uses 98 to spread itself to other machines.
 
Back
Top