new blaster variant?

[pete]

i have windows xp, all patches up to date, yet my computer
has been infected by what seems to be a variant of the
blaster worm. (i had internet connection firewall turned
off) i have several svchost.exe processes running, and
cannot terminate them without causing the box to shut down.

perhaps the new virus exploits the vulnerabilities
described here?:

http://news.zdnet.co.uk/internet/0,39020369,39117148,00.htm
http://www.pcpro.co.uk/?http://www.pcpro.co.uk/news/news_story.php?id=48745
http://securityresponse.symantec.com/avcenter/security/Content/8811.html

i have run the symantec blaster removal tool from
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
but this has not detected the virus.

any suggestions?

 

[Wesley VogelX]

I am surprised that with all the problems you are experiencing, your machine
has not burst into flames an stopped the Blaster Worm.

"Can o&o, QBS software, disk defrag be purchased from
united state retailer?
thanks"

"when i go on the inter net the computer tells me that it
is shutting down in so many seconds and i have control
over it.this happens after about five minutes. can any
one help"

"After selecting a User on XP-Home, an error message
appears which states:
Memory access violation in module kernel 32 at
8175:22294851.
Any idea what this means and how to make it stop
appearing?"

"This is what happened... I was trying to re-install
Windows XP Pro. Well after that got going.. this is what
showed up.
"system is being restarted...." then,

"STOP: c000021a {Fatal System Error} The Windows Logon
Process system process terminated unexpectedly with a
status of 0xc0000034 (0x00000000 0x00000000).
The system has been shut down"

I can not get on my computer at all so I dont know how to
even start going about fixing this. Please Help."

"Anyone out there got a good XP solution for synching
folder contents on multiple machines across a network?
TiA."

"running xp home all updates
defrag error (dfrgfat.exe application error,,the
instruction at 0x77f52a84 referenced memory at 0x00000000
the memory could not be written
have tried in safe mode also ran scannow with xp cd loaded
hard drive free space 592mb, used space 4.29gb
thanks for any assistance"

when i go on the inter net the computer tells me that it
is shutting down in so many seconds and i have control
over it.this happens after about five minutes. can any
one help

i have windows xp, all patches up to date, yet my computer
has been infected by what seems to be a variant of the
blaster worm. (i had internet connection firewall turned
off) i have several svchost.exe processes running, and
cannot terminate them without causing the box to shut down.

perhaps the new virus exploits the vulnerabilities
described here?:

http://news.zdnet.co.uk/internet/0,39020369,39117148,00.htm
http://www.pcpro.co.uk/?http://www.pcpro.co.uk/news/news_story.php?id=48745
http://securityresponse.symantec.com/avcenter/security/Content/8811.html

i have run the symantec blaster removal tool from
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
but this has not detected the virus.

any suggestions?

 

[sixwheeler]

I have the same problem and I have found that u can not
remove it w/add delete programs..Keep the firewall on and
filter all and do not let any more access even off line as
it seems to ust the printer ports. My post is right above
yours. Our problem is an exe.program that starts when u
start your
puter.

 

[Guest]

We are seeing the same issue within our Corporate LAN. All Welchia virus problems were dormant or non-existent until Sunday October 12th. We are running Symantec AV Corporate Edition 8.1 - definitions files are updated via FTP every night. We have been flagged / alerted on at least 500 PCs as of today. Most SAV Alerts indicate that the WELCHIA virus was detected and deleted - some infection were flagged as "Left Alone" ; however we are seeing recurring alerts from the same systems. These alerts are even recurring on systems that we have run all MSBLAST and WELCHIA removal tools from F-secure, Symantec and TrendMicro - applied all Windows Updates and applied RPCSS fix from Microsoft Security Bulletin 039. We are unable to make it go away and this is creating strange problems to the network connectivity - especially Intel print servers.

----- pete wrote: -----

i have windows xp, all patches up to date, yet my computer
has been infected by what seems to be a variant of the
blaster worm. (i had internet connection firewall turned
off) i have several svchost.exe processes running, and
cannot terminate them without causing the box to shut down.

perhaps the new virus exploits the vulnerabilities
described here?:

http://news.zdnet.co.uk/internet/0,39020369,39117148,00.htm
http://www.pcpro.co.uk/?http://www.pcpro.co.uk/news/news_story.php?id=48745
http://securityresponse.symantec.com/avcenter/security/Content/8811.html

i have run the symantec blaster removal tool from
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
but this has not detected the virus.

any suggestions?