Re: Viruses Galore

From: Bruce Chambers (bchambers_at_nospamcableone.net)
Date: 04/11/04 

Date: Sun, 11 Apr 2004 12:10:34 -0600

Greetings --

    Formatting the hard drive to solve a problem is rather like using
an axe to trim one's fingernails. Sure, it gets the job done, but
it's rather messy...., and almost always unnecessary.

      If you connected the PC to the Internet without having first
enabled a firewall, without having first installed an antivirus
application with current virus definition files, and before installing
the KB824146 Hotfix, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

    To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger

Bruce Chambers 

--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
You can have peace.  Or you can have freedom.  Don't ever count on 
having both at once. -- RAH
"imklueless" <anonymous@discussions.microsoft.com> wrote in message 
news:168da01c41fe8$2ff33c00$a001280a@phx.gbl...
> NachiB
> Blaster
> Lovsan
> I've followed all instructions for XP.  I have run
> the "Stinger" and placed infected programs into a vault.
> Still get the messages that my laptop is infected.
>
> Can I "bomb" the harddrive and re-install XP and start
> all over?  Will it be the cure?  Also, the keyboard and
> interal modem have stopped functioning.  Could they be
> permanently compromised by the viruses?  THANKS

Relevant Pages

  • Re: Ad-Aware and Windows Remote Procedure Call (RPC)
    ... there is a firewall via my router. ... I use an active virus checker ... Stinger did not find Blaster on my system. ... > W32.Blaster.Worm Removal Tool ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: 60 sec shutdown
    ... sure you've enabled a firewall before starting, ... What You Should Know About the Blaster Worm ... W32.Blaster.Worm Removal Tool ...
    (microsoft.public.windowsxp.hardware)
  • Re: Virus
    ... application with current virus definition files, ... sure you've enabled a firewall before starting, ... What You Should Know About the Blaster Worm ... W32.Blaster.Worm Removal Tool ...
    (microsoft.public.security.virus)
  • Re: system shutdown NT authority
    ... Further, and also like Blaster, this worm could not affect any ... sure you've enabled a firewall before starting, ... McAfee AVert Stinger Virus Removal Tool ...
    (microsoft.public.windowsxp.general)
  • Re: error lsass.exe terminated unexpectedly
    ... Further, and also like Blaster, this worm could not affect any ... McAfee AVert Stinger Virus Removal Tool ...
    (microsoft.public.win2000.general)