zenandjuice.com

i just sneezed, and someone two cubicles away IM’d me with the message “bless you”.

don’t you just love technology ?

i used to have a guestbook script on my site, but disabled it a long time ago, and apparently there was some backdoor. garrrr…. I actually was notified and discovered the problem late last week, so it’s taken care of.

the file it tried to get was /guestbook/temp/temp728.gif but when i looked, that file didn’t actually exist, which makes me think that the virus was written before they actually had a chance to hack my webserver.
(the entire temp/ directory was empty). I’ve since deleted the entire directory structure.

read #4 in the tech details below.

http://securityresponse.symantec.com/avcenter/venc/data/w32.mydoom.q@mm.html

When W32.MyDoom.Q@mm runs it performs the following actions:
1. Creates a file %Temp%Message and opens it in Notepad. This file contains
garbage data.

2. Copies itself as the files:
%System%winpsd.exe
%Windows%rasor38a.dll

Notes:
%System% is a variable that refers to the System folder. By default this
is C:WindowsSystem (Windows 95/98/Me), C:WinntSystem32 (Windows
NT/2000), or C:WindowsSystem32 (Windows XP).
%Windir% is a variable that refers to the Windows installation folder. By
default, this is C:Windows (Windows 95/98/Me/XP)or C:Winnt (Windows
NT/2000).

3. Creates a mutex named “43jfds93872″, so that only one copy of the worm
will run on the infected computer.

4. Downloads a file from one of the following domains:
www.richcolour.com
zenandjuice.com

Note: The downloaded file is detected as Backdoor.Nemog and is saved as winvpn32.exe, and then executed.

5. Checks system time. If the time is after 21:11:11 on August 20th, 2004,
the worm will exit.

6. Adds the value:

“winpsd”=”%System%winpsd.exe”

to the registry key:

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun

so that the worm starts when Windows starts.

network speed is greatly improved, if you actually plug the RJ45 cable into the network port on the laptop.

man-o-mango !

i configured my mouse icon thingy to automatically jump to the dialog box when something pops up on my computer. the problem is, that i’m scrolling across the screens (my expanded desktop is 3520 x 1200 resolution), and all of a sudden, a dialog box pops up, shooting my mouse all the way to the other side of the monitor area.

and of course my head turns WHAP FAST to see where it’s going.

whiplash smile.

cable modem got zapped friday evening…. so, been without internet access since then. It’s been about 7 years since I’ve been without 24/7 access. So I was ‘roughing’ it… hahahaha.

Cox is supposedly coming this morning to swap out the cable modem.