computer hacking.

Off topic chat
Post Reply
User avatar
Riz_RS4
Cruising
Posts: 2927
Joined: Fri Jan 31, 2003 10:15 pm
Location: South Yorkshire
Contact:

computer hacking.

Post by Riz_RS4 » Tue Aug 12, 2003 11:35 am

Right this has probably been covered before but i though i might mention it again as alot of other forum members have been hacked.

The hackers seem to be hacking via svchost.exe / messenger serive / windows remote help thinggy. [img]images/graemlins/frown.gif[/img]

There is a 1.23mb patch available from microsoft here :- Patch

Im using ZoneAlert and have manual diable the messenger serive via the admin - services under windows xp pro just to be on the safe side.

Hope this helps. [img]images/graemlins/tung2.gif[/img]
Image I`m just a hardcore petrol head :)

User avatar
PhilT
RS246.com
Posts: 8718
Joined: Fri Jan 10, 2003 2:03 pm
Location: South Yorkshire

Posa.Trojan

Post by PhilT » Tue Aug 12, 2003 8:44 pm

Just make sure you keep your systems up to date by visiting:

http://windowsupdate.microsoft.com/ (Or Windows Update in your 'Start Bar')

I spent 4hrs cleaning my tyre dealer's PC this morning [img]images/graemlins/frown.gif[/img] .
RS246 Shop - RS246 Window Stickers and RS6 Keyrings

Current : 2016 Audi SQ7 :audibash: | Radical SR3 Supersport :notworthy: | Ultima Evolution :bash:

Ex : 2010 Nissan GT-R Premium Edition | 2014 Audi S3 Sportback | 2007 Audi Q7 4.2 TDI | Clio 172 Cup | B5 RS4, C5 RS6+ (249/999) | S2 Coupe | Ex-Police Senator 3.0 24v | Ford Escort 1.3

User avatar
Riz_RS4
Cruising
Posts: 2927
Joined: Fri Jan 31, 2003 10:15 pm
Location: South Yorkshire
Contact:

Re: Posa.Trojan

Post by Riz_RS4 » Tue Aug 12, 2003 8:52 pm

I spent 4hrs cleaning my tyre dealer's PC this morning
Oh dear.... i know the feeling, could you look at this for me Riz...... 5days later! [img]images/graemlins/tung2.gif[/img]
Image I`m just a hardcore petrol head :)

User avatar
sitas3
5th Gear
Posts: 1208
Joined: Sun Jan 12, 2003 4:58 pm
Location: Surrey, UK

Re: Posa.Trojan

Post by sitas3 » Tue Aug 12, 2003 8:56 pm

Just make sure you keep your systems up to date by visiting:

http://windowsupdate.microsoft.com/ (Or Windows Update in your 'Start Bar')

I spent 4hrs cleaning my tyre dealer's PC this morning [img]images/graemlins/frown.gif[/img] .


i've been told today by our sys admins not to visit the windas update site until further notice due to MS themselves also being infected!!
M3 CSL - Silver Grey, a few options.

User avatar
PhilT
RS246.com
Posts: 8718
Joined: Fri Jan 10, 2003 2:03 pm
Location: South Yorkshire

Re: Posa.Trojan

Post by PhilT » Tue Aug 12, 2003 10:40 pm

Boolah.... MS (as a whole) are not infected, trust me. They run our software and their AV policy is strict. I have recently been asked to do their international AV architecture. Certainly do use Windows Update as regularly as possible.
RS246 Shop - RS246 Window Stickers and RS6 Keyrings

Current : 2016 Audi SQ7 :audibash: | Radical SR3 Supersport :notworthy: | Ultima Evolution :bash:

Ex : 2010 Nissan GT-R Premium Edition | 2014 Audi S3 Sportback | 2007 Audi Q7 4.2 TDI | Clio 172 Cup | B5 RS4, C5 RS6+ (249/999) | S2 Coupe | Ex-Police Senator 3.0 24v | Ford Escort 1.3

User avatar
PhilT
RS246.com
Posts: 8718
Joined: Fri Jan 10, 2003 2:03 pm
Location: South Yorkshire

Re: Posa.Trojan

Post by PhilT » Tue Aug 12, 2003 10:54 pm

Just called the US to double check, MS is fine [img]images/graemlins/thumbs.gif[/img]
RS246 Shop - RS246 Window Stickers and RS6 Keyrings

Current : 2016 Audi SQ7 :audibash: | Radical SR3 Supersport :notworthy: | Ultima Evolution :bash:

Ex : 2010 Nissan GT-R Premium Edition | 2014 Audi S3 Sportback | 2007 Audi Q7 4.2 TDI | Clio 172 Cup | B5 RS4, C5 RS6+ (249/999) | S2 Coupe | Ex-Police Senator 3.0 24v | Ford Escort 1.3

User avatar
Riz_RS4
Cruising
Posts: 2927
Joined: Fri Jan 31, 2003 10:15 pm
Location: South Yorkshire
Contact:

Re: Posa.Trojan

Post by Riz_RS4 » Tue Aug 12, 2003 10:56 pm

Just called the US to double check, MS is fine
Man i bet you know all the top dudes of all the top firms! [img]images/graemlins/bowdown.gif[/img]
Ive got the patch today but was running zonealert beforehand, not had any hackers yet. [img]images/graemlins/wink.gif[/img]
Image I`m just a hardcore petrol head :)

Carps
4th Gear
Posts: 557
Joined: Thu May 01, 2003 11:21 pm
Location: Surrey, England
Contact:

Re: Posa.Trojan

Post by Carps » Wed Aug 13, 2003 7:49 am

[img]images/graemlins/mad.gif[/img] This explains why I kept getting svchost.exe errors thrown after a few minutes. Problem is svchost is used by a lot of applications for servicing requests, such as opening files or links. With it bust, your PC is pretty much knackered.
I did an update last night when I saw MS had a new patch hoping that it would fix the problem - so far so good [img]images/graemlins/thumbs.gif[/img]

User avatar
sitas3
5th Gear
Posts: 1208
Joined: Sun Jan 12, 2003 4:58 pm
Location: Surrey, UK

Re: Posa.Trojan

Post by sitas3 » Wed Aug 13, 2003 8:14 am

Just called the US to double check, MS is fine [img]images/graemlins/thumbs.gif[/img]

hey I dare say you are correct Phil - just asked our sys admins for more info and they sent me This Warning

Apparently the newer trojans whatever they are will be attacking the MS update site soon and this is why they are getting nervous..

My home pc is behind a firewall but regardless, i still updated my PC on Sunday.
M3 CSL - Silver Grey, a few options.

User avatar
Bushy
Cruising
Posts: 2662
Joined: Thu Jan 02, 2003 2:18 pm
Location: Berkshire

Re: Posa.Trojan

Post by Bushy » Thu Aug 14, 2003 7:33 am

Top tip to get windows updates, IMHo every week or 2 a new hole is found in security in MS products so keep them up to date as they have fixes available quite quickly after the breech is found

I get about 5-10 nasty emails a week on extremecarcare, thankfully nothing has broken yet (thanks Phil for your help setting up the system)

But it does make you wonder how easily it could cause problems if you didnt keep updated
Can't beat a bit of boost!

dog
4th Gear
Posts: 645
Joined: Tue Jan 14, 2003 1:42 pm
Location: Sydney Australia

Re: Posa.Trojan

Post by dog » Thu Aug 14, 2003 12:15 pm

Well, what can I say? I have never liked Microsoft amd after looking up their site, I can't find ME. So much for update.
[img]images/graemlins/mad.gif[/img]

User avatar
PhilT
RS246.com
Posts: 8718
Joined: Fri Jan 10, 2003 2:03 pm
Location: South Yorkshire

Re: Posa.Trojan

Post by PhilT » Thu Aug 14, 2003 3:18 pm

Well, what can I say? I have never liked Microsoft amd after looking up their site, I can't find ME. So much for update.
[img]images/graemlins/mad.gif[/img]

Maybe it doesn't affect WinMe.....?
RS246 Shop - RS246 Window Stickers and RS6 Keyrings

Current : 2016 Audi SQ7 :audibash: | Radical SR3 Supersport :notworthy: | Ultima Evolution :bash:

Ex : 2010 Nissan GT-R Premium Edition | 2014 Audi S3 Sportback | 2007 Audi Q7 4.2 TDI | Clio 172 Cup | B5 RS4, C5 RS6+ (249/999) | S2 Coupe | Ex-Police Senator 3.0 24v | Ford Escort 1.3

dog
4th Gear
Posts: 645
Joined: Tue Jan 14, 2003 1:42 pm
Location: Sydney Australia

Re: Posa.Trojan

Post by dog » Fri Aug 15, 2003 3:18 pm

I think they have just forgot. I wish I had a Mac.

Carps
4th Gear
Posts: 557
Joined: Thu May 01, 2003 11:21 pm
Location: Surrey, England
Contact:

Re: Posa.Trojan

Post by Carps » Fri Aug 15, 2003 8:14 pm

Just got a mail from MS, and it doesn't affect'95, '98 second edition, or ME.

dog
4th Gear
Posts: 645
Joined: Tue Jan 14, 2003 1:42 pm
Location: Sydney Australia

Re: Posa.Trojan

Post by dog » Sun Aug 17, 2003 1:31 pm

Thanks, I got the e-mail today too. I hope it is not a hoax. It seems to be out good to be of date after all.

Post Reply

Return to “Off Topic Chat”

Who is online

Users browsing this forum: No registered users and 95 guests