Stop Microsoft

Operating Systems => Linux and UNIX => Topic started by: Crunchy(Cracked)Butter on 1 January 2003, 02:53

Title: Okay i could be fucked i need some info
Post by: Crunchy(Cracked)Butter on 1 January 2003, 02:53
I have a dual boot on my laptops system, WinME and SuSE 8.1, i also have 7GB's of stuff that needs saving and i have justed purchased a firewire CD RW for writing everything to it.  Problem is, while waiting for the firewire card i rebooted the machine and a warning came up saying i was in breach of the DMCA (which i was, its my fault yeah i know).  Anyway lucky me is outside the US but i am not taking chances, some fucker took me out over the net. helpfully the warning sugests i go to www.bsa.org (http://www.bsa.org) for info, well i *would* if my system would boot.

Anyway, i cannot access my system anymore, not even if i boot up SuSE, it seems the MBR or something has been wiped and now i have a HD full of everything that i need, this has EVERYTHING, college work, mp3's, TV shows downloaded off the net and other stuff.

Now i am most concerned about the shit i need back from the drive and trust me Void Main i'm not touching another MS OS again, its totally linux now, the MS OS cannot be trusted, i wasn't even surfing, i was on kazaa lite!

Anyway i have ordered a cable from a supplier that will allow me to fit the Laptop HD into another system (my gf's pc) so that i can get my data and copy it across and thus back it up.

Anybody see any problems with this?

If i use my legit copy of win98, it asks if i want this data removed, the installer is detecting another non DOS os and i am hopefull about this, anyway the installer won't install when i select "don't remove data", i think the cd is buggered personally because of its age.

Anyway should i have problems with it when connected up as slave on my other system, can i copy everything across?  I also have Drive Image 4 if thats any use.

Suggestions?  Yes i am a bad boy and should be spanked but i *was* going to get rid of winME once the firewire card arrived.
More importantly i don't want to lose my college work.
Title: Okay i could be fucked i need some info
Post by: rtgwbmsr on 1 January 2003, 03:23
Sorry to have to be the one to say it, but you are fucked, that message is one of a virus.
More information:
http://vil.nai.com/vil/content/v_99924.htm (http://vil.nai.com/vil/content/v_99924.htm)

Be very fucking cautious when copying the files over, or you'll just spread it to the other PC.
Title: Okay i could be fucked i need some info
Post by: Crunchy(Cracked)Butter on 1 January 2003, 03:36
if i could get linux running then i could delete it from linux.  However my GF's pc is also dual boot so what can i do.  I take it my data is possibly safe then?
Title: Okay i could be fucked i need some info
Post by: rtgwbmsr on 1 January 2003, 10:24
Get Knoppix on a CD, and boot your laptop. If I am not mistaken, you can burn from Knoppix. Search for the offending (infected) file, and get rid of it. Then, burn your shtuff to CD from Knoppix.

-OR-

You could just copy the files over to your GF's PC, but the virus may spread. You should copy, burn your stuff, and delete everything all in on session in Linux.

After you back up everything, you need to:
1) Clear your CMOS (If you want more info, I need to know what kind of laptop you have)
2) Do a reformat, and reinstall your OS.

-BY THE WAY-

Don't be suprised if the hard drive is blank. The virus may have erased the hard drive. The only way to know is Knoppix or hooking the HD up to another comp...

     
quote:
Yes i am a bad boy and should be spanked


I'm sure your GF would take care of that if it was necessary       ;)

[ January 01, 2003: Message edited by: The Muffin Man ]

Title: Okay i could be fucked i need some info
Post by: preacher on 1 January 2003, 14:50
quote:
Originally posted by Crunchy(Cracked)Butter:
I have a dual boot on my laptops system, WinME and SuSE 8.1, i also have 7GB's of stuff that needs saving and i have justed purchased a firewire CD RW for writing everything to it.  Problem is, while waiting for the firewire card i rebooted the machine and a warning came up saying i was in breach of the DMCA (which i was, its my fault yeah i know).  Anyway lucky me is outside the US but i am not taking chances, some fucker took me out over the net. helpfully the warning sugests i go to www.bsa.org (http://www.bsa.org) for info, well i *would* if my system would boot.

Anyway, i cannot access my system anymore, not even if i boot up SuSE, it seems the MBR or something has been wiped and now i have a HD full of everything that i need, this has EVERYTHING, college work, mp3's, TV shows downloaded off the net and other stuff.

Now i am most concerned about the shit i need back from the drive and trust me Void Main i'm not touching another MS OS again, its totally linux now, the MS OS cannot be trusted, i wasn't even surfing, i was on kazaa lite!

Anyway i have ordered a cable from a supplier that will allow me to fit the Laptop HD into another system (my gf's pc) so that i can get my data and copy it across and thus back it up.

Anybody see any problems with this?

If i use my legit copy of win98, it asks if i want this data removed, the installer is detecting another non DOS os and i am hopefull about this, anyway the installer won't install when i select "don't remove data", i think the cd is buggered personally because of its age.

Anyway should i have problems with it when connected up as slave on my other system, can i copy everything across?  I also have Drive Image 4 if thats any use.

Suggestions?  Yes i am a bad boy and should be spanked but i *was* going to get rid of winME once the firewire card arrived.
More importantly i don't want to lose my college work.




This is the funniest thing Ive read in a long time. Looks like the virus writers have a good sense of humor.  The stuff about the DMCA, and the fact that you fell for it is hilarious(no offense). Im gonna spread this around a bit. It will give my friends a few laughs.
Title: Okay i could be fucked i need some info
Post by: Crunchy(Cracked)Butter on 1 January 2003, 16:50
yeah shit happens i'm afraid.  Void Main did say my fingers would get burned, my fault for using a shit OS.

Knoppix is going to be a problem as i cannot get hold of it, so i will have to use SuSE.  How come this worm will spread through linux onto my GF's Windows partition?

Does this worm infect the CMOS as well?  The laptop is a NEC versa Premuim from NEC.

[ January 01, 2003: Message edited by: Crunchy(Cracked)Butter ]

Title: Okay i could be fucked i need some info
Post by: rtgwbmsr on 1 January 2003, 17:18
About the worm:

 
quote:
which can overwrite the boot sector, delete the CMOS, and delete the contents of the hard disk


It could spread through Linux theoretically, and fuxx0r her Winblows partition and her Linux partition.

I'm assuming you're in the UK here...

If you can get into the BIOS, find an option that says "Set to Default Values" or something like that.   The key to get into the BIOS should be F1.

If it gives you any other errors, tell me, I have a list of them and what to do.
Title: Okay i could be fucked i need some info
Post by: Master of Reality on 2 January 2003, 00:35
i dont think it could spread if it was in Linux.
Title: Okay i could be fucked i need some info
Post by: Crunchy(Cracked)Butter on 2 January 2003, 01:37
I wouldn't of thought it would of spread through linux easier but i had to ask.

Muffin man:  I loaded the setup defaults and i got no errors, it doesn't look like it has touched the CMOS, i did have anti virus software on the system at the time and i did move some viruses off my system so i think it has only managed to take out my MBR.  Like i said the win98 installation did report pre existing files so i am assuming they are intact as well.  It's not as though it would read the linux partition would it?  

But it did report that it detected a non DOS OS on the HD.  Just have to see when i get this cable.
Title: Okay i could be fucked i need some info
Post by: choasforages on 2 January 2003, 07:21
just because the virus doesn't do anything to linux/*tux knows when to use protection  ;)  */ it can still infect windows machins
Title: Okay i could be fucked i need some info
Post by: Lindy on 3 January 2003, 11:29
" i think it has only managed to take out my MBR. "


If your sure that only your MBR has been hosed you might try the fdisk /mbr trick with a windows boot disk. I'm just guessing here, but the DOS fdisk HAS to be good for something!
Title: Okay i could be fucked i need some info
Post by: rtgwbmsr on 3 January 2003, 14:30
quote:
Originally posted by char X[11]:
KNoppix is teh wai!!!


Yeah, I suggested that, but he said he couldn't get a hold of it. See Crunchy's third post.
Title: Okay i could be fucked i need some info
Post by: choasforages on 3 January 2003, 15:21
anyway to get linux boot disks?
Title: Okay i could be fucked i need some info
Post by: Crunchy(Cracked)Butter on 3 January 2003, 20:20
It doesn't matter anymore, i am totally fucked behond all fucking reprive.  I've lost everything!  How the fuck does a worm format a linux partition as well?  I've lost my linux partition as you can see.

Its not ideal but i have got a backup of my college work from a few weeks before...

Still not happy though and i am totally depressed at the rest of what i have lost.

2000 mp3's, 5 CD's worth of Simpsons and Futurama episodes all downloaded with 56k modem.  The mp3's are mine from my collection but i got to copy them all over again.

FUCKING HELL!!!

[ January 03, 2003: Message edited by: Crunchy(Cracked)Butter ]

Title: Okay i could be fucked i need some info
Post by: rtgwbmsr on 3 January 2003, 20:52
Dood that sucks. Sorry I couldn't do much more...what kindof MP3's were they? (bands I mean) Maybe I have some of them.

Do you still have 56k? Or do you have something faster now?

When a worm goes after the base-level stuff (MBR, CMOS), anything on the computer can get fucked real quick.

Things to avoid to protect against virii:
1) Windows (duh)
2) Anything having to do with MS Office, especially Word and Outlook.
3) File sharing (especially Kazaa), and warez over file sharing.
4) Warez in general.
5) Having 1 partition with everything on it (made this mistake a while back)
6) Open ports (especially 80 nowadays)
Title: Okay i could be fucked i need some info
Post by: Agent007 on 3 January 2003, 21:46
Dude,

Ofcourse it will detect a non DOS OS...Windows does not recognise Linux partitions....There is a strong possibility that your data in the Linux partition is STILL intact. If u can mount it on another Linux box, then nothing like it. In any case, if the FAT/NTFS partition is wiped, u can always recover 99.9% of the stuff. But that's another case all together.

rgds,
007

 
quote:
Originally posted by Crunchy(Cracked)Butter:
I
But it did report that it detected a non DOS OS on the HD.  Just have to see when i get this cable.



[ January 03, 2003: Message edited by: Agent007 ]

Title: Okay i could be fucked i need some info
Post by: Agent007 on 3 January 2003, 21:52
Dude,

Get hold of a firewall!! This one is very good...
www.agnitum.com (http://www.agnitum.com) It's free and filters most of the malacious stuff. I had been using it for a long time and Windows nerver gave trouble. Btw, I didn't even install anti-virus....

rgds,
007


 
quote:
Originally posted by Crunchy(Cracked)Butter:
It doesn't matter anymore, i am totally fucked behond all fucking reprive.  I've lost everything!  How the fuck does a worm format a linux partition as well?  I've lost my linux partition as you can see.
[ January 03, 2003: Message edited by: Crunchy(Cracked)Butter ]

Title: Okay i could be fucked i need some info
Post by: Agent007 on 3 January 2003, 21:56
Dude,

Just to add...When using Outlook/OE, block all kinds of scripting for these e-mail clients. U will the option in Internet options OR install the firewall I mentioned..

rgds,
007

 
quote:
Originally posted by The Muffin Man:

Things to avoid to protect against virii:
1) Windows (duh)
2) Anything having to do with MS Office, especially Word and Outlook.

Title: Okay i could be fucked i need some info
Post by: rtgwbmsr on 3 January 2003, 22:25
Dude, triple post much?
That's why there is an edit feature...so you can add more later.   :rolleyes:
Title: Okay i could be fucked i need some info
Post by: Agent007 on 3 January 2003, 23:07
Whoops! Didn't think of that...was in a hurry,,  (http://smile.gif)  

rgds,
007
Title: Okay i could be fucked i need some info
Post by: Crunchy(Cracked)Butter on 4 January 2003, 03:00
I looked at the drive using linux and it said basically the drive is totally free, it needs a format for windows to look at it.

I never use Outlook i use Mozilla mail.  MS Office wasn't installed, its likely that the culprit was Kazaa, bastards.  If i could only punch the virus writer, ahhh, it still wouldn't be enough though.

Thankyou for the suggestions i will look them all up.  In all reality its my own fault, the quicker i accept it the faster i will learn, trouble is i told my gf not to use windows while on the net as it is bad, instead use SuSE.  I am a victim of not taking my own advice!  Her PC is still running doing fine.

Is there any chance of getting Kazaa to work on linux without all this virus shit affecting me?

The worst part of all this is i have a nice new FireWire CDRW drive sitting here waiting for me to back up everything worse still is the fact i am waiting for the firewire laptop card!

If it only came sooner!

Also anyone know if an Iomega CDRW FireWire drive will run under linux?

[ January 03, 2003: Message edited by: Crunchy(Cracked)Butter ]

Title: Okay i could be fucked i need some info
Post by: mobrien_12 on 4 January 2003, 08:40
It is probable that the virus just wiped your partition table.  In this case, all linux data is ok but the computer doesn't know it is there

If you have the partition numbers available, you can use the linux fdisk to redefine the partitions.  I write these numbers down now and keep them in a file folder in case some unforseen disaster strikes.

I don't know if you have these numbers, but it is actually pretty amazing how the data is undamaged when you "delete" a partition.
Title: Okay i could be fucked i need some info
Post by: Agent007 on 4 January 2003, 10:50
Dude,

I hope u have'nt deleted or formated the linux partition..

007

 
quote:
Originally posted by Crunchy(Cracked)Butter:
I looked at the drive using linux and it said basically the drive is totally free, it needs a format for windows to look at it.
[ January 03, 2003: Message edited by: Crunchy(Cracked)Butter ]

Title: Okay i could be fucked i need some info
Post by: choasforages on 4 January 2003, 10:59
kazaa? kazaam must be the noise to describe throwing it in the trashcan, i have a lower opionin of kazaa user's then those fucking bearshare leachers/*gtk-gnutella users however, almost always have good files and quick downloads*/. as for your mp3's, what did you lose, i happen to have plenty of "backups"

[ January 04, 2003: Message edited by: choasforages ]

Title: Okay i could be fucked i need some info
Post by: rtgwbmsr on 4 January 2003, 11:16
quote:
Originally posted by Crunchy(Cracked)Butter:
Is there any chance of getting Kazaa to work on linux without all this virus shit affecting me?



Something called Limewire   (http://smile.gif)  
www.limewire.com (http://www.limewire.com)

You still have to tell us what kind of music it is so we can see if we have it (me and chaos)
Title: Okay i could be fucked i need some info
Post by: Crunchy(Cracked)Butter on 4 January 2003, 11:16
No i havn't formatted the drive yet, linux reads it all as free.

The mp3's are not that much of a problem, its just copying them again, i have about 90% on disk anyway but they are old backups.

What fileshare programs can i get for SuSE, can i get any at all?
Title: Okay i could be fucked i need some info
Post by: choasforages on 4 January 2003, 11:40
lime wire, mutella, phex, quetella

and my favorite, GTK-Gnutella. the 0.91.1 release is amazing. it has a lot of bug fixes, and sweet features like swarming, sha1 url searches, and is realiable. and did i mention it is very very fast unlike that java based gnutella client. supposedly their is a way to use wine to use kazaa, but kazaa can go to hell. a proprietary piracy network, now it really sounds rediculus?  did i mention that gtk-gnutella is very reliable. it can run for days and days. my computer crashes before it does./*i hate hardware problems*/
Title: Okay i could be fucked i need some info
Post by: Crunchy(Cracked)Butter on 4 January 2003, 16:48
Wonderful, i'm downloading LimeWire right now.

Other than that thanks for an education guys.
Title: Okay i could be fucked i need some info
Post by: TheQuirk on 4 January 2003, 23:24
Yup, you can run "KaZaa Lite" in Linux. You need a few extra DLLs, but I got'em... Give me your email (PM or just publicly with a [nospam] sign) addy and I'll send you a tarball containing everything (the wine config, extra DLLs, etc).

EDIT: whoops, didn't see second page...

[ January 04, 2003: Message edited by: TheQuirk ]

Title: Okay i could be fucked i need some info
Post by: beltorak0 on 5 January 2003, 00:21
personally I can't stand the java based LimeWire.  It took about 3 hours just to read my shared files directory; the entire time it churned the disk intermittently and slowed everything else down.  And it never saved the results, so everytime I restarted it it would have to read them again.  Gtk-gnutella is much better.  I never have problems with it.  Nicer interface too  ;) .
Title: Okay i could be fucked i need some info
Post by: UODU on 9 January 2003, 01:43
G'day 'guys',

Could just be paranoia but I wouldn't put it past those 'tinneysoftcocks' to be putting out worms etc. to screw with Linux.

Regards
Braindead  ;)
Title: Okay i could be fucked i need some info
Post by: Doctor V on 9 January 2003, 18:46
Oh yes, gtk-gnutella, it rocks, if you are using Linux, don't even think about kazaa.  If your not, do.
Title: Okay i could be fucked i need some info
Post by: Calum on 9 January 2003, 18:56
quote:
Originally posted by Braindead:
G'day 'guys',

Could just be paranoia but I wouldn't put it past those 'tinneysoftcocks' to be putting out worms etc. to screw with Linux.

Regards
Braindead   ;)  


you can get around this problem by using an open source program. no way there will be any malicious code or spyware in there. gtk-gnutella is open source isn't it?
Title: Okay i could be fucked i need some info
Post by: choasforages on 10 January 2003, 04:49
if nobody audits the code, all sorts of shit can get in there
Title: Re: Okay i could be fucked i need some info
Post by: Crunchy(Cracked)Butter on 20 May 2007, 17:27
I'm on a mac now and haven't lost any data since.
Title: Re: Okay i could be fucked i need some info
Post by: Galatic on 8 June 2007, 18:30
it does sound like a virus try booting off a linux live cd and if it picks up on your network card use that to transfer your files afterwards you may want to format that POS  :thumbup:
Title: Re: Okay i could be fucked i need some info
Post by: solemnwarning on 8 June 2007, 18:49
http://www.ctrlaltdel-online.com/comic.php?d=20060513 (http://www.ctrlaltdel-online.com/comic.php?d=20060513)
Title: Re: Okay i could be fucked i need some info
Post by: worker201 on 8 June 2007, 18:59
Quote from: Galatic
it does sound like a virus try booting off a linux live cd and if it picks up on your network card use that to transfer your files afterwards you may want to format that POS  :thumbup:
Check the dates on the original posts.  I'm sure by now, when any dumbass can buy a usb device that will read a laptop hard drive, he's recovered most of his files.
Title: Re: Okay i could be fucked i need some info
Post by: Galatic on 8 June 2007, 19:23
o srry i didn't even notice it was made in 2002 boy do i feal stupid must explain why he was useing Win-ME