I am SICK of w32.spybot.worm

news wrote:

>
> Meanwhile can the Federal Bureau Investigation PLEASE arrest some people who
> wrote the spybot pgm?
>
>

Where do you suggest they start looking?
 >> Stay informed about: I am SICK of w32.spybot.worm 

In article <jINrf.14768$iz3.1560@text.news.blueyonder.co.uk>,
sales DeleteThis @logicians.com says...

[...]

> How do I stop further files being installed?

Use a decent AV utility?

> Is a router the answer?

No.
 >> Stay informed about: I am SICK of w32.spybot.worm 

"Boss Hog" <boss.hog.news.RemoveThis@invalid.googlemail.com> wrote in message
news:MPG.1e19dc28aef7c32b9898f4@news.individual.net...
> In article <jINrf.14768$iz3.1560@text.news.blueyonder.co.uk>,
> sales.RemoveThis@logicians.com says...
>
> [...]
>
> > How do I stop further files being installed?
>
> Use a decent AV utility?

Well I have NORTON which helps a lot. But I am really sick of this. I have a
lot of work in running my company, and I dont need pesky virus attacks. The
police need to start working.

>
> > Is a router the answer?
>
> No.
 >> Stay informed about: I am SICK of w32.spybot.worm 

"news" <sales.TakeThisOut@logicians.com> wrote in
news:jINrf.14768$iz3.1560@text.news.blueyonder.co.uk:
>
> Whoever wrote w32.spybot.worm NEEDS some time in jail.

Perhaps, but the odds are in their favor that nothing will be done.

> I get the infection every 1-2 wks and then remove it. It then comes
> back.

[snip]

> How do I stop further files being installed?
>
> Is a router the answer?


30 seconds to do a search with Google for W32.Spybot.Worm came up with the
following info from Symantec:

-------------------------------------
W32.Spybot.Worm is a detection for a family of worms that spreads using
the Kazaa file-sharing network and mIRC. This worm can also spread to
computers that are compromised by common back door Trojan horses and on
network shares protected by weak passwords.

Newer variants may also spread by exploiting the following
vulnerabilities:

* The DCOM RPC Vulnerability (described in Microsoft Security Bulletin
MS03-026) using TCP port 135.
* The Microsoft Windows Local Security Authority Service Remote Buffer
Overflow (described in Microsoft Security Bulletin MS04-011).
* The vulnerabilities in the Microsoft SQL Server 2000 or MSDE 2000
audit (described in Microsoft Security Bulletin MS02-061) using UDP port
1434.
* The WebDav Vulnerability (described in Microsoft Security Bulletin
MS03-007) using TCP port 80.
* The UPnP NOTIFY Buffer Overflow Vulnerability (described in Microsoft
Security Bulletin MS01-059).
* The Workstation Service Buffer Overrun Vulnerability (described in
Microsoft Security Bulletin MS03-049) using TCP port 445. Windows XP users
are protected against this vulnerability if the patch in Microsoft Security
Bulletin MS03-043 has been applied. Windows 2000 users must apply the patch
in Microsoft Security Bulletin MS03-049.
* The Microsoft Windows SSL Library Denial of Service Vulnerability
(described in Microsoft Security Bulletin MS04-011).
* The VERITAS Backup Exec Agent Browser Remote Buffer Overflow
Vulnerability (as described here).
* The Microsoft Windows Plug and Play Buffer Overflow Vulnerability
(described in Microsoft Security Bulletin MS05-039).

-------------------------------------

I would suggest you install a firewall (or at the very least a router),
make sure your systems are all up to date with security related patches,
uninstall Kazaa and stop using mIRC. If that doesn't take care of the
problem, then I suggest you get someone who knows what they are doing to
come in and help you secure your network. You obviously don't know how to
do so. That's not meant as an insult, just an observation.

> Meanwhile can the Federal Bureau Investigation PLEASE arrest some
> people who wrote the spybot pgm?

Which wouldn't resolve your problem at all. In most cases, arresting the
original author(s) doesn't help much once the exploit code is out on the
net and making the rounds. There are usually plenty of others who then take
it and spread it further.


--
Rick Simon rsimon.TakeThisOut@cris.com

Include "spam(trap)key" somewhere in the
body of any email to avoid spam filters.
 >> Stay informed about: I am SICK of w32.spybot.worm 

news wrote:

> I am not a "moron" I expect cops to arrest criminals. I dont carry a gun,
> cops do that for me.
> We have prisons for virus writers - they need to start using them.

You need to consider exactly how much snooping the cops would have to do
in order to find the people responsible.

It would be sort of like letting the cops' boss keep your extra money so
it won't get stolen. The cops' boss in most cities is the Mayor.

Secure your property properly. No amount of legal action can make up for
the damage a criminal can do.

Why am I not surprised you threw in that comment about guns? Cops are
not everywhere. They cannot be. Some things you have to take care of
yourself.
 >> Stay informed about: I am SICK of w32.spybot.worm 

news wrote:

> > > I get the infection every 1-2 wks and then remove it. It
> > > then comes back.
> >
> > That's what you get for running Windows XP. If you're not
> > running with a NAT router, then you're a moron.
>
> I am not a "moron" I expect cops to arrest criminals.

What cave have you been living in the past few years?

You, and your fellow UK citizens (like those in USA) have the
manufactured expectation to be protected against terror. Everything
else is secondary.

Viruses do not cause terror.

Until the battle, no, the war against terror is over, you'll have to
deal with viruses yourself.

Now do your part and keep a close watch on your fellow citizens and
report all suspicious behavior to the authorities.
 >> Stay informed about: I am SICK of w32.spybot.worm 

"optikl" <optik-mechanik.DeleteThis@invalid.net> wrote in message
news:A8qdnXQ1f6BThi3enZ2dnUVZ_sCdnZ2d@comcast.com...
> news wrote:
>
> >
> > Meanwhile can the Federal Bureau Investigation PLEASE arrest some people
who
> > wrote the spybot pgm?
> >
> >
>
> Where do you suggest they start looking?

In their files.

>
 >> Stay informed about: I am SICK of w32.spybot.worm 

news wrote:
> "optikl" <optik-mechanik DeleteThis @invalid.net> wrote in message
>>news wrote:
>>
>>>Meanwhile can the Federal Bureau Investigation PLEASE arrest some people
>>> who
>>>wrote the spybot pgm?
>>
>>Where do you suggest they start looking?
>
> In their files.

wah wah wah... they need to *do* something... wah wah wah...

i think you'll find that in order for them to have anything in their
files they need to already know who the virus writers are - they
don't... there's no magic oracle that one can ask "who wrote this virus?"...

if you had a concrete suggestion to help them track the people down
instead of a whining plea maybe then it could be passed on to the
authorities...

--
"it's not the right time to be sober
now the idiots have taken over
spreading like a social cancer,
is there an answer?"
 >> Stay informed about: I am SICK of w32.spybot.worm