Surprise!
Blaster is probably NOT gone if you did not apply the security patch. It
came right back within seconds and re-infected your machine. Either that
or you may have been infected by the welchia worm. It takes less than 20
seconds of being on the `net for an unpatched and/or un-firewalled
machine to get infected by these worms. This is why I always stress to
apply the patch FIRST, then remove the infection. Either that or take
the computer off the `net, run the FixBlast and FixWelch tools, then
apply the SP and the patch before getting back on the `net.
Get a software firewall installed, too. Plenty of free ones out there.
Good luck.
Steve
Larry Kennedy wrote:
> I first reported svchost was hogging all the memory on the
> Windows 200 Professional op system, making system
> unbearably slow, and it was suggested that the Blaster
> virus was present. It was and many thanks for that to this
> newsgroup !!! Now second problem exists.
> I downloaded Symantec fix and ran and removed virus.
> I could not run the tool to "plug the hole" as it said I
> needed service pack 2 or later. I downloaded service pack 4
> (the latest) and subsequently tried service pack 3, but
> when I try to run these, I get to the "inspecting your
> system" stage and then the update just disappears, stops
> completely, no pop up or message or anything. Blaster is
> gone but I cannot seem to run the updates ??? Do I have
> some other virus present ? Whereas svchost.exe was taking
> 70% of CPU when doing nothing, now its down to 30 or 40
> occassionally..
> any ideas at all please ? surely I dont have to run service
> pack 2, then 3 then 4 to get to the latest update ? maybe
> 2000 professional is slightly diff to 2000 ? I dont know
> and would appreciate any ideas ?
> best regards
> Larry Kennedy
> New Zealand
|