Blast(er) virus/ worm

[Alice/Bob]

I remember several months ago there was a large amount of
information about a virus or worm named Blast or Blaster
or SoBig. I think it was MBlast.exe or something similar.
It appeared to only infect WinXP systems. My previous
WinXP had a download (Critical Update) for this problem
and it was KB823980 and I could see it listed when I went
to the Control Panel / Add/Delete Programs. However, my
son gave us a new notebook with WinXP on it. However, we
remembered the Blast(er) problem and looked in the
Add/Remove Programs and did not see KB23980 listed. We
went to the MS Critical Update page and there was no
Critical Update there to be downloaded for KB823980, nor
was there a Critical Update download for KB824146, which
we have learned is supposed to be a replacement for
KB823980. Can someone please tell us (senior citizens)
what we should do now to ease our minds about this 'virus'
(Blast/Blaster) which caused so much damage a few months
ago? My husbank was advised (in a previous post) to
download KB824146 from another site (other than MS), which
we are really hesitant in doing because we would not like
to do something that could cause problems on this new
notebook. Can someone please help solve this problem for
us?

 

[Guest]

-----Original Message-----
I remember several months ago there was a large amount of
information about a virus or worm named Blast or Blaster
or SoBig. I think it was MBlast.exe or something similar.
It appeared to only infect WinXP systems. My previous
WinXP had a download (Critical Update) for this problem
and it was KB823980 and I could see it listed when I went
to the Control Panel / Add/Delete Programs. However, my
son gave us a new notebook with WinXP on it. However, we
remembered the Blast(er) problem and looked in the
Add/Remove Programs and did not see KB23980 listed. We
went to the MS Critical Update page and there was no
Critical Update there to be downloaded for KB823980, nor
was there a Critical Update download for KB824146, which
we have learned is supposed to be a replacement for
KB823980. Can someone please tell us (senior citizens)
what we should do now to ease our minds about this 'virus'
(Blast/Blaster) which caused so much damage a few months
ago? My husbank was advised (in a previous post) to
download KB824146 from another site (other than MS), which
we are really hesitant in doing because we would not like
to do something that could cause problems on this new
notebook. Can someone please help solve this problem for
us?
.
I would advise against downloading patches from a site

other than windows update.KB824146 I believe is
intergrated with several other hot fixes you most likely
have it if you go to windows update and it is not listed.
To protect yourself from the Blaster
1.Either turn on xps firewall or install a third partys
like Nortons.
2.Install and update a good anti-virus program.
3.Shut off messenger service (not msn messenger)in admin
tools>services,This last one will also help with internet
popups.
I can't stress enough about getting a firewall!

 

[Rob Karatzas]

Hi

(helped a friend the other day with this...)

go here: http://securityresponse.symantec.com/avcenter/tools.list.html
(clean what's there first)

download the blaster removal tool (fix PC).

update your AV software (if you don't have anything, go here for a nice AV
freebie: http://www.grisoft.com/us/us_dwnl_free.php )

scan entire hard drive.

then go to MS:
http://www.microsoft.com/downloads/...ae-a1ba-4d4a-b424-95d32cfc8cba&DisplayLang=en

(fix PC with MS download)

then run windowsupdate.microsoft.com (take care of all critical updates)

Rob

 

[Alice/Bob]

We have NAV2002 and do have latest definitions and did
complete scan. We also have downloaded all Critical
Updates for the WinXP.
Would downloading:
"http://www.microsoft.com/downloads/details.aspx?
FamilyID=5fa055ae-a1ba-4d4a-b424-
95d32cfc8cba&DisplayLang=en"
cause any problems to our system, etc.?

As we said, we are afraid to do anything that would cause
problems with our new notebook and WinXP.
We were just a bit concerned that we didn't see Critical
Update download for either KB 823980 or KB824146, nor did
we see it in the Control Panel's Add/Delete Programs.
(Could another Critical Update download possibly have
taken the place of the KB823980 or KB824146? I would like
to get a definitive answer.)

 

[Bruce Chambers]

Greetings --

The original patch, from KB823980, was found to be flawed, and was
replaced by the one from KB824146.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH