Re: WormBlaster

From: Bill Sanderson (Bill_Sanderson_at_msn.com.plugh.org)
Date: 01/12/04


Date: Mon, 12 Jan 2004 14:58:09 -0500

Yes.

1) To prevent the shutdown:

Start, run, shutdown -a <enter>

2) The next logical step is to put up a firewall. Since one is not built-in
to Windows 2000, you'd need to choose among third-party offerings and
install it. For now, lets concentrate on your current problem and leave the
firewall 'til later.

3) You need to download and install Microsoft's patch for the vulnerability
exploited by this worm, and for Windows 2000:
(hmm--re-reading your note, you mention Windows 2000 (home.) There isn't a
home version of Windows 2000. There IS a home version of Windows XP.)

Windows 2000:
http://www.microsoft.com/downloads/details.aspx?FamilyId=F4F66D56-E7CE-44C3-8B94-817EA8485DD1&displaylang=en

Windows XP:
http://www.microsoft.com/downloads/details.aspx?FamilyID=5fa055ae-a1ba-4d4a-b424-95d32cfc8cba&DisplayLang=en

4) Once this is in place, you can no longer be re-infected, however, you
need to remove the infection already on your machine:

Here's Microsoft's blaster removal tool:

http://www.microsoft.com/downloads/details.aspx?FamilyID=e70a0d8b-fe98-493f-ad76-bf673a38b4cf&displaylang=en

5) OK--breathe freely--you've dealt with this particular problem. However,
there are lots more out there, and future ones may be harder to deal with.
Microsoft's best advice to help you avoid these future problems is in the
three easy steps here:

http://www.microsoft.com/security/protect/default.asp

You've already got good antivirus protection in place--but that's step 3.
You also need to get a firewall in place, and make sure you've applied all
critical updates. Critical updates are easy--just go to Windows update and
keep going back until no more critical updates are offered. And install the
automatic tool to check for critical updates. The firewall is
important--take some time to choose between the various free software
firewalls and choose one, install it, and keep it running. Don't be too
alarmed by what it tells you it is keeping out--in fact, you may want to
turn that information off--just be happy that it is doing its job.

"Peter" <anonymous@discussions.microsoft.com> wrote in message
news:04ea01c3d940$915c5e70$a101280a@phx.gbl...
> Where do I go to be able to rid my PC of the worm. I have
> Norton Symantic and I recently changed to Window 2000
> (Home) from window 98 and all I have had is trouble getting
> on the internet. I keep getting thown off and I am not
> sure why my Norton is not not compatable and not able to
> get rid of the worm.
>
> Can anyone help?



Relevant Pages

  • Re: Startup programs
    ... > If you don't wish to follow all of the advice immediately, ... I will assume a "Windows" operating system is what ... If there was more than one, install ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Latest Update Wreaked Havok - Cannot Restore
    ... track of what you install in order to be able to uninstall it. ... been diligent with your critical updates, ... Windows Update ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: partitioned hardrive and installing XP Pro
    ... the clean install method is the best by far... ... of contacting the Internet UNTIL you have activated the Windows XP ... download/instyall all critical updates. ... FIREWALL ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Service Pack 1 & 2
    ... but enable to install because of service pack 2. ... >> I recently reinstalled Windows XP home on a new hard disk because the ... >> I tried to install service pack 1 but was rejected from doing so. ... > Why you should use a computer firewall.. ...
    (microsoft.public.windowsupdate)
  • Re: How do I get the Windows Update icon to stop notifying me of SP2?
    ... If you don't wish to follow all of the advice immediately, ... using Windows XP "prettifications". ... If there was more than one, install them back ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsupdate)

Quantcast