Page 1 of 1

computer hacking.

Posted: Tue Aug 12, 2003 11:35 am
by Riz_RS4
Right this has probably been covered before but i though i might mention it again as alot of other forum members have been hacked.

The hackers seem to be hacking via svchost.exe / messenger serive / windows remote help thinggy. [img]images/graemlins/frown.gif[/img]

There is a 1.23mb patch available from microsoft here :- Patch

Im using ZoneAlert and have manual diable the messenger serive via the admin - services under windows xp pro just to be on the safe side.

Hope this helps. [img]images/graemlins/tung2.gif[/img]

Posa.Trojan

Posted: Tue Aug 12, 2003 8:44 pm
by PhilT
Just make sure you keep your systems up to date by visiting:

http://windowsupdate.microsoft.com/ (Or Windows Update in your 'Start Bar')

I spent 4hrs cleaning my tyre dealer's PC this morning [img]images/graemlins/frown.gif[/img] .

Re: Posa.Trojan

Posted: Tue Aug 12, 2003 8:52 pm
by Riz_RS4
I spent 4hrs cleaning my tyre dealer's PC this morning
Oh dear.... i know the feeling, could you look at this for me Riz...... 5days later! [img]images/graemlins/tung2.gif[/img]

Re: Posa.Trojan

Posted: Tue Aug 12, 2003 8:56 pm
by sitas3
Just make sure you keep your systems up to date by visiting:

http://windowsupdate.microsoft.com/ (Or Windows Update in your 'Start Bar')

I spent 4hrs cleaning my tyre dealer's PC this morning [img]images/graemlins/frown.gif[/img] .


i've been told today by our sys admins not to visit the windas update site until further notice due to MS themselves also being infected!!

Re: Posa.Trojan

Posted: Tue Aug 12, 2003 10:40 pm
by PhilT
Boolah.... MS (as a whole) are not infected, trust me. They run our software and their AV policy is strict. I have recently been asked to do their international AV architecture. Certainly do use Windows Update as regularly as possible.

Re: Posa.Trojan

Posted: Tue Aug 12, 2003 10:54 pm
by PhilT
Just called the US to double check, MS is fine [img]images/graemlins/thumbs.gif[/img]

Re: Posa.Trojan

Posted: Tue Aug 12, 2003 10:56 pm
by Riz_RS4
Just called the US to double check, MS is fine
Man i bet you know all the top dudes of all the top firms! [img]images/graemlins/bowdown.gif[/img]
Ive got the patch today but was running zonealert beforehand, not had any hackers yet. [img]images/graemlins/wink.gif[/img]

Re: Posa.Trojan

Posted: Wed Aug 13, 2003 7:49 am
by Carps
[img]images/graemlins/mad.gif[/img] This explains why I kept getting svchost.exe errors thrown after a few minutes. Problem is svchost is used by a lot of applications for servicing requests, such as opening files or links. With it bust, your PC is pretty much knackered.
I did an update last night when I saw MS had a new patch hoping that it would fix the problem - so far so good [img]images/graemlins/thumbs.gif[/img]

Re: Posa.Trojan

Posted: Wed Aug 13, 2003 8:14 am
by sitas3
Just called the US to double check, MS is fine [img]images/graemlins/thumbs.gif[/img]

hey I dare say you are correct Phil - just asked our sys admins for more info and they sent me This Warning

Apparently the newer trojans whatever they are will be attacking the MS update site soon and this is why they are getting nervous..

My home pc is behind a firewall but regardless, i still updated my PC on Sunday.

Re: Posa.Trojan

Posted: Thu Aug 14, 2003 7:33 am
by Bushy
Top tip to get windows updates, IMHo every week or 2 a new hole is found in security in MS products so keep them up to date as they have fixes available quite quickly after the breech is found

I get about 5-10 nasty emails a week on extremecarcare, thankfully nothing has broken yet (thanks Phil for your help setting up the system)

But it does make you wonder how easily it could cause problems if you didnt keep updated

Re: Posa.Trojan

Posted: Thu Aug 14, 2003 12:15 pm
by dog
Well, what can I say? I have never liked Microsoft amd after looking up their site, I can't find ME. So much for update.
[img]images/graemlins/mad.gif[/img]

Re: Posa.Trojan

Posted: Thu Aug 14, 2003 3:18 pm
by PhilT
Well, what can I say? I have never liked Microsoft amd after looking up their site, I can't find ME. So much for update.
[img]images/graemlins/mad.gif[/img]

Maybe it doesn't affect WinMe.....?

Re: Posa.Trojan

Posted: Fri Aug 15, 2003 3:18 pm
by dog
I think they have just forgot. I wish I had a Mac.

Re: Posa.Trojan

Posted: Fri Aug 15, 2003 8:14 pm
by Carps
Just got a mail from MS, and it doesn't affect'95, '98 second edition, or ME.

Re: Posa.Trojan

Posted: Sun Aug 17, 2003 1:31 pm
by dog
Thanks, I got the e-mail today too. I hope it is not a hoax. It seems to be out good to be of date after all.