Virus

[unmerged(7276)]

Ive noticed a lot of EU players have been subject to a clever worm virus called mblast 32. This prevented me from playing yesterday and has effected many people on my ICQ list and my brother who just phoned me. It exploits a bug in windows xps RPC service. This makes your PC download and run an exe file! The file can usually be found and deleted from you windows/system32 folder and is called mblast.exe. IT may have a different name though. Also block traffic to port 135 and 4444 as these are ports that it uses.

see http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html for more information. YOU CAN ALSO DOWNLOAD A TOOL TO FIX IT HERE

 

[TheArchduke]

Seems like some others caught it too. Does it restart your cpu every 2 minutes?

 

[Prince Eugene]

Originally posted by TheArchduke
Seems like some others caught it too. Does it restart your cpu every 2 minutes?

It reboots your computer every sixty seconds, more precisely. Someone took advantage of this and slipped a Python 1.2 server onto my computer. I suggest you guys check your hard drives...

http://www.europa-universalis.com/forum/showthread.php?threadid=99456

 

[ForzaA]

*phew* it says i dont have it.. although my PC still has a nasty habit of sometimes rebooting *just because*

 

[Owen]

Originally posted by ForzaA
*phew* it says i dont have it.. although my PC still has a nasty habit of sometimes rebooting *just because*

Overheating CPU maybe? Check your fans work OK and run the monitoring software that hopefully came with your motherboard.

 

[unmerged(7276)]

I suggest all that dont have it install the windows patch anyway. As I say it uses port 135 to install itself. If you use windows update regulary then you should have it anyway. Note this patch will not remove the virus but will prevent you from getting it. After you run the fix tool from the link i gave it will direct you to the patch on microsoft.com.

Yes is does restart your computer but it isnt supposed to. The hack may cause the RPC service to crash which will in turn crash windows.

 

[ForzaA]

Originally posted by Owen
Overheating CPU maybe? Check your fans work OK and run the monitoring software that hopefully came with your motherboard.

nope.. it reboots right away.. and display CPU tempareture then, well within the limits

monitoring software that came with my motherboard

 

[unmerged(17884)]

I assume if you use Windows 98 you don't need to worry about this particular virus?

 

[Prince Eugene]

Originally posted by Byng
I assume if you use Windows 98 you don't need to worry about this particular virus?

It only effects NT, XP, and Windows 2000 users.

 

[Owen]

Originally posted by ForzaA
nope.. it reboots right away.. and display CPU tempareture then, well within the limits

monitoring software that came with my motherboard

Well, I got a CD for the Asus motherboard that came with my computer. I also got a newer CD when I upgraded my motherboard and other bits last week, but that's less surprising.

Originally posted by Prince Eugene
It only effects NT, XP, and Windows 2000 users.

Ah, I love the glories of being out of date.