LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Non-*NIX Forums > General
User Name
Password
General This forum is for non-technical general discussion which can include both Linux and non-Linux topics. Have fun!

Notices


Reply
  Search this Thread
Old 08-12-2003, 06:07 PM   #1
itsjustme
Senior Member
 
Registered: Mar 2003
Location: Earth
Distribution: Slackware, Ubuntu, Smoothwall
Posts: 1,571

Rep: Reputation: 47
Anybody else hit by the W32/Lovsan.worm.


Read from the bottom up:

Quote:
Have you considered scrapping microsoft and going with Linux servers?

regards...

-----Original Message-----
From: Support
Sent: Tuesday, August 12, 2003 2:37 PM
To: me
Subject: RE: Dead homepage notification

Sorry Mr Smith,

The personal webserver was attacked last night by the W32/Lovsan.worm. Rather than expose users to this we shut down the server until adequate protection for that server is established. Because it was not detected until 11 hours ago, we chose not to take the chance that it could be distributed by email as well. Again we are sorry for any inconvenience.

Thanks

Tim

-----Original Message-----
From: me
Sent: Tuesday, August 12, 2003 2:11 PM
To: isp
Subject: Dead homepage notification

Hi,

Don't you think it would be a good idea, if you're going to kill the homepages for a day or two, that you could notify your customers about the outage via e-mail? And give some sort of indication about what's going on and when we can expect to be back up.

Regards,

me
Note: Names changed to protect the, uh.. innocent.
Also, I received no reply to my last question up there at the top.

 
Old 08-12-2003, 07:46 PM   #2
joeface
LQ Newbie
 
Registered: Aug 2003
Location: NJ
Distribution: Fedora
Posts: 17

Rep: Reputation: 0
got hit by it at work today. i spent 12 hours playing whack-a-mole with it. we run solaris and hpux systems. ran into a buttload of trouble because there are apps on port 135 that barf when the worm makes a connection attempt, and other apps that can't stand up to that much network load. i'm not doubting that ms software is more vulnerable than linux is, but it's not true that *nix cures all your troubles.

what would cure everyone's troubles? if either blackhats would cease to exist (yeah right), or if all organizations (not necessarily ms, either) would design their software with more foresight (once again, yeah, right, and where's the point at which you stop testing?).

i agree with you in that i prefer linux to ms products, but i just want to point out that it's not always ms that causes problems. my problems today were the result of a loser who wrote a worm, ms's lack of foresight, and another very large software company whose daemon died when the worm hit it, or hit it's subnet.

your problems weren't entirely caused by ms -- your isp should have informed you of what was happening and why.

there isn't always one cause and one solution to a problem.

Last edited by joeface; 08-12-2003 at 08:49 PM.
 
Old 08-13-2003, 08:27 AM   #3
davholla
Member
 
Registered: Jun 2003
Location: London
Distribution: Linux Mint 13 Maya
Posts: 729

Rep: Reputation: 32
I got hit by on my machine at home which is dual boot.
My dad's machine got it by it as well. I got rid of it on his machine, Win XP was fine, logged on to the internet to get the patch and it was re-infected, crashed before I got the patch.
 
Old 08-13-2003, 08:46 AM   #4
sub_slack
Member
 
Registered: Jul 2003
Distribution: slackware
Posts: 56

Rep: Reputation: 15
news

hahhahah
i knew this would happen
its in the news everywhere, this is so funny
 
Old 08-13-2003, 08:54 AM   #5
itsjustme
Senior Member
 
Registered: Mar 2003
Location: Earth
Distribution: Slackware, Ubuntu, Smoothwall
Posts: 1,571

Original Poster
Rep: Reputation: 47
I don't see this as funny at all.

I hope whoever started this virus, and anybody else who starts them, can be caught and prosecuted to the full extent of the law.

regards...
 
Old 08-13-2003, 09:00 AM   #6
sub_slack
Member
 
Registered: Jul 2003
Distribution: slackware
Posts: 56

Rep: Reputation: 15
microsoft should be caught and prosecuted to the full extent of the law
for selling buggy crap for big $$.
anyway, i hope more people will consider switching linux after this...
 
Old 08-13-2003, 09:06 AM   #7
davholla
Member
 
Registered: Jun 2003
Location: London
Distribution: Linux Mint 13 Maya
Posts: 729

Rep: Reputation: 32
I do not think it is funny at all. I only use Linux at home but my wife likes Windows and my lodgers are just about capable of turning a PC on so they need to use Win XP.
I was surprised that it said that in the US a PC gets infected within 25 minutes of being connected. Here it is 25 seconds if it is broadband !
Then again 'it is not our fault says Microsoft' was pretty funny !

Last edited by davholla; 08-13-2003 at 09:10 AM.
 
Old 08-13-2003, 09:06 AM   #8
MasterC
LQ Guru
 
Registered: Mar 2002
Location: Salt Lake City, UT - USA
Distribution: Gentoo ; LFS ; Kubuntu ; CentOS ; Raspbian
Posts: 12,613

Rep: Reputation: 69
I actually thought it was very funny, and I don't know why. I was spending the evening fixing my buddies brand new (literally, only like a week old) box from Dell cause it got hit 'mysterously' from it. He hasn't recieved any emails, any. He claims to have downloaded nothing, and surfed only to Ebay. So it's a mystery, but for some reason I couldn't stop giggling everytime the computer would go to shut down (the cause the virus has).

Cool
 
Old 08-13-2003, 09:12 AM   #9
itsjustme
Senior Member
 
Registered: Mar 2003
Location: Earth
Distribution: Slackware, Ubuntu, Smoothwall
Posts: 1,571

Original Poster
Rep: Reputation: 47
Quote:
Originally posted by MasterC
I actually thought it was very funny, and I don't know why. I was spending the evening fixing my buddies brand new (literally, only like a week old) box from Dell cause it got hit 'mysterously' from it. He hasn't recieved any emails, any. He claims to have downloaded nothing, and surfed only to Ebay. So it's a mystery, but for some reason I couldn't stop giggling everytime the computer would go to shut down (the cause the virus has).

Cool
Lay off the caffeine for a couple of days and get some sleep.

 
Old 08-13-2003, 09:16 AM   #10
davholla
Member
 
Registered: Jun 2003
Location: London
Distribution: Linux Mint 13 Maya
Posts: 729

Rep: Reputation: 32
Master C,

You do not have to download anything. Yesterday we got infected just as soon as we connected to the internet.
At one point, I thought that I was going to have to go home and download using linux to get the fix as it was difficult to get the fix before it re-infected it and crashed again.
I know that I had got rid of it as it was stable before we reconnected.
 
Old 08-13-2003, 09:18 AM   #11
MasterC
LQ Guru
 
Registered: Mar 2002
Location: Salt Lake City, UT - USA
Distribution: Gentoo ; LFS ; Kubuntu ; CentOS ; Raspbian
Posts: 12,613

Rep: Reputation: 69
Believe it or not, I'm stimulant free most of the time. I have a Pepsi/coke or Iced Tea here and there (more when I'm working) but other than that, I just drink lots and lots of water.

Sleep definitely sounds good though, I think I will. I'm gonna go mow my lawn and then head to bed. It's nearly 730AM here, my bed time is ~10 so I'm doin good

Cool
 
Old 08-13-2003, 09:21 AM   #12
MasterC
LQ Guru
 
Registered: Mar 2002
Location: Salt Lake City, UT - USA
Distribution: Gentoo ; LFS ; Kubuntu ; CentOS ; Raspbian
Posts: 12,613

Rep: Reputation: 69
Quote:
Originally posted by davholla
Master C,

You do not have to download anything. Yesterday we got infected just as soon as we connected to the internet.
At one point, I thought that I was going to have to go home and download using linux to get the fix as it was difficult to get the fix before it re-infected it and crashed again.
I know that I had got rid of it as it was stable before we reconnected.
Relatively of course

I actually did have to go home to get the patches and virus scan, the computer there couldn't stay up long enough to even navigate to a page on it. Luckily I only live about 2 minutes away (and run linux obviously ) so it wasn't a big deal. Actually, that might have been the funny part. I leave mine on for oh, at least 71 days uptime so far, and nothing. This guy has his on for, oh, maybe 30 minutes a day.

No virii aren't funny, but it's more of an ironic haha than a bust your gut laughing haha.

Cool
 
Old 08-13-2003, 09:25 AM   #13
Trinity22
Member
 
Registered: Jul 2003
Location: oregon coast
Distribution: Fedora Core 3
Posts: 280

Rep: Reputation: 30
I'm so glad I'm on the linux side. sheesh. and i'm sure this won't be the last security hole. isn't there a new vulnerabilty outed every few weeks or something?

trinity
 
Old 08-13-2003, 10:21 AM   #14
davholla
Member
 
Registered: Jun 2003
Location: London
Distribution: Linux Mint 13 Maya
Posts: 729

Rep: Reputation: 32
Quote:
Originally posted by MasterC
Relatively of course


' I leave mine on for oh, at least 71 days uptime so far, and nothing. '

Cool
I meant relatively stable

Are you not worried about fires or using too much electricity.
I used to work in a place where they always turned all PCs off before going home for fire safety. I have heard of PCs (running Linux) catching fire. Windows has a safety feature to make this unlikely - it is called crashing
 
Old 08-13-2003, 10:28 AM   #15
sorrodos
Member
 
Registered: Jul 2003
Location: Salt Lake City, UT and Spokane, WA
Distribution: Mandrake 10.0, Gentoo, FreeSBIE 1.0
Posts: 345

Rep: Reputation: 30
Hey guys, if any of you still are dealing it w/ the worm, when you get the notification that your computer is going to shutdown in some number of seconds, open a command/console window and type "shutdown -a". That aborts the shutdown...
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
w32 codecs gone from apt irish rebel Ubuntu 1 09-22-2005 05:58 AM
linux w32 codecs? claybub Linux - Software 1 06-19-2004 12:26 AM
w32 GetTickCount equivalent on linux Whitman Programming 3 01-02-2004 01:11 PM
W32/Sober-B worm snort rule????? netmon Linux - Security 1 12-19-2003 06:17 AM
W32/Sober-B worm snort rule????? netmon Linux - Security 1 12-18-2003 02:57 PM

LinuxQuestions.org > Forums > Non-*NIX Forums > General

All times are GMT -5. The time now is 07:14 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration