• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Dnet Worm Now CIH Positive!!!!

ViRGE

Elite Member, Moderator Emeritus
Well, if we didn't allready have enough to worry about, the Dnet Worm(W32.hllw.bymer.worm) has contracted a CIH varient(W32.Kriz, which attacks on Christmas) in some cases. As reported by News.com, the thorn in our side we call Bymer, has taken on a partner, the CIH varient Kriz. This new CIH varient not only has the ability to infect all EXE files, but can spread via open network shares. In addition, as what was mentioned above, it seems to be able in infect the Dnet Worm, meaning that it gains Bymer's ability to move around.🙁 Unfortunately, we're now to this: The Dnet client is not just being used to overtake machines for Bymer's stats, but it's now leathal with Kriz.😱

If you haven't allready, please make sure that your computer is safe from Bymer, and it's varients; and that you scan all incomming files. With this deadly pair out, no one is safe; and Dnet's reputation(along with Dnet's participant's) is on the line.🙁 Please, practice safe computing.😱

PS If I ever find this Bymer guy, he's going to get the full force of an impact hammer :|
 
Grrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr!!! :|

A variant of CIH nuked my AX6BC mobo 15 months ago. Thanks to Aopen's prompt evaluation before they told me what they thought had occurred and that this was not covered by warranty, I was 28 days without a computer. Almost a month without AnandTech, just when the transition from UBB to FuseTalk occurred.

Grrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr!!! :|
 
thanks for the heads up Virge. Let us know when its safe to come back on line. my herd is shut down until this childish BS is finished.

I hate hackers:|
 
Getting rid of Bymer is no problem, Dnet has a utility to do so. Kriz is very similar too, since most of the AV firms have utilities to disarm it in memory. However, since both are more or less undetectable without AV software, they tend to be a problem.🙁

Also, I have some more bad news.:| I'm pretty sure that the trojan(s) written to get TA/DPC members in trouble can be infected too. As far as I know if, it's similar enough that it's at risk; so W32.ViRGE may not be far away.🙁

PS Tripleshot, as long as you've got all of your shares protected, your herd will be fine. This is a worm problem, not a hacking problem; it requires user stupidity to cause problems
 
I don't get it.. if your gonna make a virus for god sake don't make it distroy hardware. Sure we'd all get a littel mad to see some laughing santa dance across our screen saying we've been had by some virus but to have your system totally nuked it just sick.

just my 2c btw.. i've had the NYB virus and a lan at work got funlove both don't distroy anything.. then again our .com company was at a stand still for about 2 days while we cleaned it... only a minor set back/warning compaired to what bios flashing virus could have done.

Bart(drunk again)
 
And here I am without any Virus/etc protection. Hrmm, I have not messed with a scanner since I put win2k on my main box. What do you guys recommend for use with Win2k? Ack, and scanners just slow down file access and stuff like that...not to mention they use valuable cycles :|
 
We got hit with the Loveletter virus at work, and it was trying to be destructive, and later variants were destructive. :|

It took us about 8 hours to clean everything and restore sanity. We've been getting hits from the Navidad and another one, but fortunately our anti-virus software detects and cleans those. :|

Dagnab destructive viruses and the sickos who write them. And what to they all say when caught? Oh, I didn't mean any harm, I didn't mean for it to do that. Grrrr :| bunch a BS!

rant rant rant! :|

Ok, I'm better now. 😱
 
I use a nice combination of programs to protect my PC

One is called The Cleaner. It is made by a company called MooSoft ( not kidding either) It soul purpose it to keep out trojan viruses. It is constantly updated has well. I also use innoculate it. So far so good, no viruses or trojans.


MooSoft

Inoculate it


Free version to use
 
New member here...

How do you get this virus?
Should I be worried if I just leave my computer on and dnet cracking away at RC5 all day?
Win2k, broadband connection, no shared drives.

Thanks...
 
wrickard, if you have a firewall, you reduce your risk of trojan attack. I am personally fond of Norton Anti-Virus 2000. It checks all incoming mail before I even see the contents. ZoneAlarm keeps my firewall up.

btw, does anyone use ZoneAlarm Pro? Is it worth paying to upgrade?
 
Thanks JonB...
Let me ask a couple more clarifying questions:
To get infected, I'd actually have to run a program (like an e-mail attachment) or
can I get infected somehow through the dnet client's internet connection or somehow
through my cable modem connection?
And what purpose would a firewall serve in protecting me from the virus?
(I realize it is nice to have to protect from hackers...)
 
The Dnet(Bymer) worm can automaticly move around and infect wide-open network shares. Additionally, it'll auto-start the Dnet client, which as News.com was reporting, has been found to bbe infected with Kriz in some cases. You can however get Kriz just by opening an infected EXE file.🙁
 
I dont think this was made clear, YOU CANNOT GET THE VIRUS BY RUNNING THE DNET CLIENT (if you downloaded the clients from distributed.net or from the TAcube site). the way that you get most viruses is to run attachemts SCAN ALL INCOMING FILES BEFORE OPENING! UPDATE YOUR ANTIVIRUS SOFTWARE REGULARLY! and last but not least MAKE SURE THE FILE IS LAGIT! if you are unsure contact the person who sent it to you.

narzy
 
Back
Top