Win98 hangs beacuse of Welchia worm

[kuzkuz]

Hi,

We still have some servers infected by Welchia and Blaster on our network, the weird thing is I see that some Win98 machines are getting effected by these infected worms communictation. which is not standard as these worms suppose to effect only Win2000 and above machines..

The symptom, is a PC hanging\crashing and afterwards by checking the computer personal firewall I see several requests of Port TCP 135 which are all denied.
computers effected seems to get 70%-100% CPU util after Port 135 is found

Anyone saw somthing like this? is there any patch for Win98 that can fix this?

Thx a lot, this is a real pain..
KuzKuz



Hey, make your did for today!
help a Newbie! (That's me )

 

[Xemus]

Most important thing to do is to take any computer (including servers) offline if they are infected. As soon as you detect the infection, remove the network cable. Leaving it on means you are leaving yourself wide-open for more infections and intrusions and similar things like the current issue you are having.

Take em offline, clean em, and then see if your issues persist.

http://www.closedsocket.com

 

[2ffat]

These virii will attack any Windows that uses RPC DCOM. AFAIK, there is not a Win9x patch since MS no longer supports Win9x. Maybe someone here can correct me if I'm wrong.


James P. Cottingham

When a man sits with a pretty girl for an hour, it seems like a minute. But let him sit on a hot stove for a minute and it's longer than any hour. That's relativity.
[tab][tab]Albert Einstein explaining his Theory of Relativity to a group of journalists.

 

[Xemus]

I thought they were still supporting 98 til January 15th 2004? That's Microsoft's projected end of life cycle date.

http://www.closedsocket.com

 

[Xemus]

I was close. It's January 16th, 2004.

http://www.microsoft.com/windows/lifecycle.mspx

For all of you that don't want to upgrade, Windows 98 will no longer get security patches and upgrades after that date. Scary isn't it?

http://www.closedsocket.com

 

[carrr]

Yup...Xemus is correct on the support timeline (Jan 16, '04 to be exact ...

http://www.microsoft.com/windows/lifecycle.mspx).

Never heard of/nor had any problems thus far with any of the aforementioned viruses on our 9x machines...so this is interesting.

You CAN turn off DCOM in 9x with this registry edit:
ftp://topaz.msu.montana.edu/Microsoft%20software/Updates/Windows_98/dcomoff.reg

 

[kuzkuz]

I hate to admit that you are all right, Win98 have reached EOL from what I see on Win98 homepage... :
and I checked the DCOM and I'm safe..

anyone else have an idea about this thing??

Hey, make your did for today!
help a Newbie! (That's me )