MSBlast

[k]

Please could anyone help me with the MS Blast Virus on my
laptop. I have recently purchased a new laptop. It already
had anti Virus on it but obviously not the patch to
prevent MSBlast. I now have the Virus in two forms and
despite running the patch, my Norton Antivirus still says
I have the virus. How can I get rid of it.

Thanks
Regards

 

[Karl Levinson [x y] mvp]

Try running the Stinger removal tool from www.mcafee.com for Blaster. Also,
use a firewall, such as www.kerio.com or www.sygate.com which are free. Go
to http://windowsupdate.microsoft.com to ensure you have all the latest
microsoft patches. Manually reinstall the MS03-039 DCOM RPC patch if
necessary from www.microsoft.com/technet/security/current.asp Configure
your antivirus to download updates automatically every week or so.

 

[ML]

Put it into Quarentine.!!!!

 

[Michael Arm]

Please could anyone help me with the MS Blast Virus on my
laptop. I have recently purchased a new laptop. It already
had anti Virus on it but obviously not the patch to
prevent MSBlast. I now have the Virus in two forms and
despite running the patch, my Norton Antivirus still says
I have the virus. How can I get rid of it.

- Activate WinXP Firewall.
- End the MSBlast, teekids and/or penis32 Processes.
- Go to Windowsupdate and update your Windows
- While downloading go to Registry and delete in
HKEY_LocalMachine\Software\Windows\CurrentVersion\Run the Keys that
correspond to the Viruses.
- Delete the Virus files from your Harddisk.

 

[Bruce Chambers]

Greetings --

If you've connected the PC to the Internet without having first
enabling a firewall, without having first installed an antivirus
application with current virus definition files, and/or before
installing the KB824146 Hotfix, you're very likely to have been
infected from any of the thousands of PCs on the Internet that are
constantly broadcasting the Blaster and/or Welchia worms. It only
takes a few seconds of exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH