Boston

That Damn MS Blaster Virus! Here is the Fix!
TheBellaDonna See Agency Profile 10182 reads
posted

We got hit with that stupid virus and it knocked us off for a few days until we figured out what went wrong with our system. Sure as hell, the MS Blaster found it's way to us and screwed us up. If you have sent in an email, and haven't gotten a reply yet, that is why. We are just now getting to the backlog.

Most virus scans won't pick it up as it is not email based, it slides in through a hole in Widows XP, NT, and some other versions.

If you are running a Windows based operating system and are not sure if you are can catch the damn thing, see the attached link below to download the patch to keep you from catching the damn thing. It truley is aggrivating if you do get the freaking thing!

If you already have the W32 Blaster Worm, you need the removal tool first. Microsoft just links to Symantec for it so you might as well get it there directly. There are now two additional variations of the worm, the original is covered by (Norton Antivirus) Live update of 8/11, the B and C variants by the 8/13 definitions. The MS Update patch plugs the DCOM/RPC vulnerability and having it installed will protect you from future worms designed to exploit that same security gap. W32 Blaster Worm only attacks Win XP and 2000, though the DCOM/RPC vulnerability exists in NT and Server 2003 as well. Windows 95/98 and ME are untouched by this worm. Thats a good thing since Microsoft stopped supporting Win98 in July 2003. Microsoft also has a utility that you can use to scan your Home or SOHO network to find blaster on any connected machine. Go to Gibson Research at grc.com for more information and useful tools. One disables the NT legacy messenger service on XP and 2000 that no one ever uses and no one knows is there. I have never been bothered by messenger pop-ups, but I'm sure it's only a matter of time. I can't believe that there already web sites hawking advertising using messenger service. If you think e-mail spam is bad, wait till this stuff hits high gear.

The link is to the page for the B variant, but it uses the same removal tool. Also, messenger service is not the same as MSN Messenger or Windows Messenger. It is the pop-up messaging service you access by the command line NET SEND {computer(IP or NetBIOS name)or Domain or *} {message eg. Hi there!} at Start-Run. There is also a GUI interface at R-click My Computer/Manage, in System tools R-click Shared Folders/All Tasks/send console message... Messenger Service is only in Windows OS's that share the NT kernal (NT/2000/XP/2003).

It is a reminder why it is a good idea to run Windows Update at least once a week and keep your virus definitions current. Of course, the best answer is to a switch to Linux.

-- Modified on 8/15/2003 3:14:03 PM

Register Now!