worm

[Sue Sommers]

I do have the worm and I can't download the patch because
it shuts off the system during download. Is there a way
to order for purchase a CD with the same security to
install at home? Let me know and I will give all
information like credit card and address and such.

Sue Sommers
other e-mail (e-mail address removed)

 

[Curtis Koenig [MSFT]]

Hi Sue,

You can try these steps yourself if you are comfortable working in your
registry:

1. Remove the infected computer from the network and reboot into Safe Mode.

2. Locate the files below, plus the Value "windows auto update" under the
Run registry key and deleted them all:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

MSBLAST.EXE under the "C:\Windows\system32" folder

MSBLAST.EXE-1c3a3376.PIF under the "C:\Windows\prefetch" folder

2a. If you are running Windows XP (any version) it is also recommended that
the Internet Connection Firewall be enabled to prevent re-infection when
connecting to the internet.

3.Contact your Antivirus provider for assistance in using any removal tools
they are providing or you can use one that Symantec is providing.
Symantec's Removal tool
<http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.re
moval.tool.html>.

4. If the OS continues to shut down when trying to connect to
http://www.microsoft.com/technet/security/bulletin/MS03-026.asp, with the
dialog box stating the OS will be shutting down in 30 seconds.

Set the RPC Service to "Take No Action" and reboot, this should allow you
to download the patch and install it.

Disclaimer:
While this may remove the worm in the short term it is advisable to backup
any data and then format and reinstall the computer. Once infected by a
virus, worm or other malicious program it is not possible to verify that
another program that could compromise the system has not been left by the
original infection.

Third party products mentioned in this posting are the sole responsobility
of the vendor providing them and in no way should this be considered an
endoresement by Microsoft.

--
Curtis Koenig
Support Professional
Microsoft Clustering Technologies Support
MCSA, MCSAS,MCSE, MCSES

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit. Thanks!
--------------------

 

[Vince C.]

-----Original Message-----

[...]
you also better get youself norton antivirus or somthing
like that to clean up what this virus as left you with.
gooner

I would also advise AVG, Grisoft Anti Virus software, which is free. As I
read somewhere else Norton Antivirus is great but requires some sort of
exorcism if you want to uninstall it, for instance. Besides it's not free.
I've been running AVG for a long time and I quite trust it.

Vince C.

 

[Curt]

--
Curt.

 

[Curt]

"gooner" <[email protected]> a écrit dans le message de
news:[email protected]...

I would also advise AVG, Grisoft Anti Virus software, which is free. As I
read somewhere else Norton Antivirus is great but requires some sort of
exorcism if you want to uninstall it, for instance. Besides it's not free.
I've been running AVG for a long time and I quite trust it.

Vince C.

------------------------------------
Sorry about the earlier blank post.

To each their own when choosing what AV to use, but I've used NSW of which
NAV is part of since '99 and have never had a problem uninstalling it to
upgrade to the next version when necessary. No special tricks were involved,
I just used add/remove programs and it was gone. I'm now using NSW '02 along
with AVG.....no conflicts between them. I will say that trying to use McAfee
and NAV together is difficult at best....they don't co-exist well together.
If one should decide to use two AV programs, be sure to set them to auto
scan at different times at least four hours apart.

 

[Vince C.]

"Curt" <[email protected]> a écrit dans le message de #P5VF#[email protected]...
[...]

To each their own when choosing what AV to use, but I've used NSW of which
NAV is part of since '99 and have never had a problem uninstalling it to
upgrade to the next version when necessary. No special tricks were involved,
I just used add/remove programs and it was gone. I'm now using NSW '02 along
with AVG.....no conflicts between them. I will say that trying to use McAfee
and NAV together is difficult at best....they don't co-exist well together.
If one should decide to use two AV programs, be sure to set them to auto
scan at different times at least four hours apart.

Not that it causes troubles while uninstalled but it leaves components
behind that are difficult to remove manually since the uninstall procedure
is incomplete. You can check and/or ask for more info on
news://news.grc.com/grc.security.software. I've had a chat with someone
there about antivirus systems, including NAV. It's where I've been reported
about the difficult uninstalling.

Vince C.

 

[Jupiter Jones [MVP]]

Vince;
I have NEVER had trouble with Norton products unless you count using
the tool Norton provides for complete removal.
However there is something far more important especially because most
users never have a need to remove the AV application.
What you consider best and for what ever reasons is no good to another
person that doesn't like it and thus will not use it.
The best AV application is the application the person will properly
use and update.
For you that is AVG, but not for everybody.
For someone else it is McAfee and another Norton etc.