Virus protection failing

[SFC Vines Dereck]

We are getting the W32 blaster worm virus in winnt and the
nortons anti-virus detects it but will not delete it,
quarantine the virus, or clean it. Is there something in
windows that is preventing the virus to be caught. Do I
need to change a setting somewhere? I try to download the
security patches, and windows updates only to see that
they fail. I need help because this virus has the
potential to shut down our network.

Thank you
(e-mail address removed)
(e-mail address removed)

 

[mamabear]

Here are Symantec's removal instructions:
http://securityresponse.symantec.com/avcenter/venc/data/w32
..blaster.worm.html
Here is Symantec's Removal Tool:
http://securityresponse.symantec.com/avcenter/venc/data/w32
..blaster.worm.removal.tool.html

 

[Lanwench [MVP - Exchange]]

Have you tried applying the RPC buffer overflow exploit patch manually, not
through Windows update?
Do you have a good firewall in place? Get one ASAP to protect your network
if you don't have one already...I like Sonicwalls, myself.

 

[Karl Levinson [x y] mvp]

Agreed, those are good tools to use here, though you also need to figure out
why the patch is not installing correctly, and reinstall the patch manually.
If it still fails, post exact error messages here.

You might also confirm that your firewall is blocking things like TCP/UDP
135. If it is, then you may also need to consider whether your VPN and
dialin remote users and roaming laptops are able to infect your network, and
if so, whether you want to take additional steps to prevent that as well,
such as putting some kind of firewall or packet filtering solution between
the remote users and your internal network.