worm question

[mel]

Does the SP1 contain the patch for the blaster worm? I
was wondering because I installed the SP1 on Sunday, but
on Monday, I experienced the shutdown notices, but the
symantec removal tool informed me there was no virus. I
could have sworn I had my ICF on, but it wasn't and after
that I was able to stay on line. I have searched
everything and I still don't find anything. Thanks a
bunch.

 

[Jupiter Jones [MVP]]

Mel;
No, SP1 is a year old, the patch is a month old.
DISCONNECT the subject computer from any network IMMEDIATELY.

Install or enable a firewall IMMEDIATELY:
http://support.microsoft.com/?kbid=283673

VERY IMPORTANT to follow ALL steps, closing ports or installing the
patch is NOT enough.
Download the patch and regedit referenced in the article below.
You may need to do this at an uninfected computer and burn to CD or
save on floppies.
Each file is small enough to fit on a floppy.

Follow this to clean and protect your computer:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

After this is resolved prevent similar occurrences by installing ALL
Critical Updates from Windows Update.
Keep antivirus up to date and run at least weekly.
Install or enable a firewall.

See also:
http://support.microsoft.com/?kbid=826955

 

[Niveus]

-----Original Message-----
Does the SP1 contain the patch for the blaster worm? I
was wondering because I installed the SP1 on Sunday, but
on Monday, I experienced the shutdown notices, but the
symantec removal tool informed me there was no virus. I
could have sworn I had my ICF on, but it wasn't and after
that I was able to stay on line. I have searched
everything and I still don't find anything. Thanks a
bunch.
.

As long as I know, SP1 doen't contain the patch for the
worm. SP1 already release long before the hole on th RPC
found. So I think you sould download the patch. You can
go to the following link to find what you need
http://www.microsoft.com/technet/treeview/default.asp?
url=/technet/security/bulletin/MS03-026.asp