I think I encountered a new variant of the lovsan/msblast virus

  • Thread starter Thread starter Lee
  • Start date Start date
L

Lee

I got the dialog box telling me that rpc terminated unexpectedly yada yada,
but it asked me to click prompt to "remove the infected file". Since the
dialog box was xp-style and my os was w2k, I did not trust it and did not
click the link. I watched as the counter went down to 0, then in red
letters it flashed "urgent!" and something to the effect that I need to
click the prompt immediately to avoid damage. I wish I could remember
exactly what it said, but I had nothing to write down what I was seeing at
the time. I never responded to any of the prompts - I just shut down and
restarted. Since then, I have verified that all my ports were stealthed
(both via hardware firewall and Kerio software firewall), I did have the
security patch, and my antivirus was up to date. Technically speaking I
should not have seen this occur.

Has anyone encountered this yet? Everything I have seen so far shows the
same dialog box but no promts for user input.

Lee
 
I don't think so, kaptain. This so-called "advert" completely took control
of my system. All my desktop icons and wallpaper disappeared, the
background was simple white with this large dialog box in the center - that
was all that was on the computer screen. ctrl-alt-del did not even work. A
pop-up ad would not cripple my system like that. It looked identical to the
dialog box that appears with the lovsan/msblast worm, except it offered me a
prompt (some hypertext) to click to "remove the infected file".
 
Back
Top