New virus: did you suffer from it?

muxec · January 25, 2003, 12:07

The new virus is reported overloading and crashing web servers causing lowering speed and overtraffic. Did(do) you suffer from it?

Sarxis · January 25, 2003, 12:13

Did it infect Apolyton? Cuz if so, then yeah. If not, then yeah.

MRT144 · January 25, 2003, 12:14

could you be more specific?

unless you are referring to my posting...

i have 16 forum windows open! feel my wrath!

Solver · January 25, 2003, 12:19

It's not a virus. It's a virus-like attack on SQL servers.

muxec · January 25, 2003, 12:20

It's worm it infects only memory and can not be located by antiviruses

Eli · January 25, 2003, 12:23

I dont have the virus itself, but I noticed the significant slowdown.

MRT144 · January 25, 2003, 12:25

i havent

Panag · January 25, 2003, 12:28

hi ,

and then to say there are simple things that prevent it from doing its job , .....

stuff like finjan and esafe products , .....

have a nice day

MRT144 · January 25, 2003, 12:39

is it an israeli only thing?

Datajack Franit · January 25, 2003, 12:43

Does it affect porn sites as well?

muxec · January 25, 2003, 12:49

I called to my ISP tech support and heared something about "We have troubles with international web trafic. We are trying to restore normal work". May it be related to virus?

mrboo123 · January 25, 2003, 12:50

No

Panag · January 25, 2003, 13:21

hi ,

guys here might be a solution , .......

it has proven itself many times to stop bugs dead cold , its a program from www.finjan.com

have a nice bug free day

MRT144 · January 25, 2003, 13:25

so im taking it this is an israeli only thing...like members only jackets in the 80s

Urban Ranger · January 25, 2003, 13:26

Link?

Panag · January 25, 2003, 13:41

Quote:

Originally posted by Urban Ranger
Link?

hi ,

www.finjan.com

have a nice day

Panag · January 25, 2003, 13:43

Quote:

Originally posted by MRT144
so im taking it this is an israeli only thing...like members only jackets in the 80s

hi ,

what the product

yes it is , but its one of the best in the world , in use with a lot of countries and some ISP's , ....

esafe the other big firm has large deals now with several huge telephone companies , ....

huh , you do where talking about the product , right

have a nice day

Urban Ranger · January 25, 2003, 14:01

Quote:

Originally posted by panag

hi ,

www.finjan.com

have a nice day

???

Where's the news of the virus?

Panag · January 25, 2003, 14:05

Quote:

Originally posted by Urban Ranger

???

Where's the news of the virus?

hi ,

its a tool to stop bugs , .... not to report about them , ....

but here is some news ;

New virus alert: REAL. No remedy yet?
On:
http://www.f-secure.com/v-descs/mssqlm.shtml
and
http://online.securityfocus.com/arch...2/2003-01-28/0

This worm was detected in the internet on 25th of January 2003
around 10:30 GMT.

F-Secure is currently analysing what's going on.

If you can provide us with binary samples of the worm, please
contact samples@f-secure.com or call +358-400-648180.
------
CNN:

http://www.cnn.com/2003/TECH/interne....ap/index.html

Electronic attack slows Internet
Saturday, January 25, 2003 Posted: 7:34 AM EST (1234 GMT)

WASHINGTON (AP) -- Traffic on the many parts of the Internet slowed
dramatically for hours early Saturday, the apparent effects of a
fast-spreading, virus-like infection that overwhelmed the world's
digital pipelines and interfered with Web browsing and delivery of
e-mail.

Sites monitoring the health of the Internet reported significant
slowdowns globally. Experts said the electronic attack bore remarkable
similarities to the "Code Red" virus during the summer of 2001 which
also ground traffic to a halt on much of the Internet.

"It's not debilitating," said Howard Schmidt, President Bush's No. 2
cyber-security adviser. "Everybody seems to be getting it under
control." Schmidt said the FBI's National Infrastructure Protection
Center and private experts at the CERT Coordination Center were
monitoring the attacks.

happy now ?

have a nice day

MRT144 · January 25, 2003, 14:08

the virus. is the virus an israeli only thing...because i havent seen it mentioned elsewhere and it seems all the israelis on the board know about it

heres a link to a members only jacket...
http://www.yesterdayland.com/popoped...ion/fa1614.php

Panag · January 25, 2003, 14:18

Quote:

Originally posted by MRT144
the virus. is the virus an israeli only thing...because i havent seen it mentioned elsewhere and it seems all the israelis on the board know about it

heres a link to a members only jacket...
http://www.yesterdayland.com/popoped...ion/fa1614.php

hi ,

like always we are updated

others are not , so far it made it into the UK , holland , belgium and some other european countries , most of the time on servers that are not protected like they are supposed to be , .....

have a nice day

Panag · January 25, 2003, 14:22

hi ,

more bugnews at www.esafe.com/home/csrt/news.asp

have a nice day

Ari Rahikkala · January 25, 2003, 14:23

While I haven't noticed any particular slowdown on my part, I have to wonder... how is it possible that anyone can create a worm that gets famous and widespread by using an exploit that has been fixed half a year ago, on a program that should almost never be connected to the public Internet? My trust in the sysadmins of the world has gone down a notch again...

Panag · January 25, 2003, 14:31

Quote:

Originally posted by Ari Rahikkala
While I haven't noticed any particular slowdown on my part, I have to wonder... how is it possible that anyone can create a worm that gets famous and widespread by using an exploit that has been fixed half a year ago, on a program that should almost never be connected to the public Internet? My trust in the sysadmins of the world has gone down a notch again...

hi ,

most people dont bother to update or download patches , ......

like "windowsupdate" , most window users dont use it (!)

have a nice day

Gatekeeper · January 25, 2003, 15:15

It's a worm that began popping up shortly after midnight and it's *not* an Israeli-only thing. It was affecting the global Internet and was allegedly launched by some yahoo in China named "Lion," according to a Reuters story on AOL.

Gatekeeper

cavebear · January 25, 2003, 15:20

Before I signed on today, I went out to do some errands. The bank ATMs were all shut down, and one employee advised us that it was a general problem in the area. Until I got home, I did not know about the world-wide problems.

So it did affect me in that I couldn't get cash from and ATM (thank goodness for credit cards), but it hasn't seemed to affect my computer use at all.

JCG · January 25, 2003, 16:40

So that's the big mess that's going on....Oh what the....

Panag · January 26, 2003, 18:06

AMARILLO -- A fast moving computer worm slowed down servers for thousands of businesses across the globe Saturday morning. The virus is thought to have originated overseas. It attacks servers using Microsoft SQL, used mainly by companies to store information. Experts say this new virus is similar to another worm which swept through hundreds of thousands of computers in a single day.

W32.SQLExp.Worm is a worm that targets systems running Microsoft SQL Server 2000, as well as Microsoft Desktop Engine 2000. The virus is not as serious as the CodeRed worm which circulated in late July 2001, but that didn't stop one local business from taking measures to protect its customers.

Early Saturday morning, the 'SQL Slammer' made its way into Amarillo computer networks. The folks at Amarillo Online spotted the nasty virus and stopped it dead in it's tracks. Founder David Boyd explains, "We put on our gateway or our perimeter where our network and our customers connect to the Internet. We blocked it right there, so it can't come into our network to even get to our customers."

Boyd says that's not preventing the virus from trying, though. "It's hitting our network pretty hard, so it's pretty significant. We're getting about three requests per second coming into our system."

Before Amarillo Online detected the virus, it did reach a couple of local customers. Support technician Casey Downing tells of how the virus reached one an unsuspecting small business owner. "He didn't even know he had it. He doesn't even know he's running a server and most people don't. They just have software installed and don't have any idea."

Amarillo Online will provide a 'patch' to that customer which will destroy the virus. Left untreated, the virus could have devistating effects. Boyd says, "You'll notice the computer is really dragging and the worm can send out enough data to a computer that it can actually take the computer down."

The Internet virus affected some large businesses. Bank of America customers saw exactly what the worm can do when they went to ATMs. Many of the bank's computers were unable to retrieve customer information and therefore, would not spit out any cash.

Experts say the virus shouldn't effect people using the Internet at home. The virus attacks a software application that is largely used by businesses. People at home generally don't use the system and the virus is not being spread by e-mail. Experts are still trying to figure out who is responsible for starting the Internet worm

hi ,

more news on the bug , ....

have a nice bug free day

Urban Ranger · January 27, 2003, 01:42

Yeah, the Slammer worm.

So much for Trustworthy Computing.

Asher · January 27, 2003, 01:45

Quote:

Originally posted by Urban Ranger
Yeah, the Slammer worm.

So much for Trustworthy Computing.

Surely you're a bright enough man to know the patch was for a product released in late 99/early 2000, well before Trustworthy Computing was launched. And better still, the patch was released in October 2002 once it was discovered, well before this attack.

The people hit by the worm are the companies with inept administrators who don't understand the concept of patching vulnerabilities.