ATTENTION: W32.Blaster.Worm Circulating!

[ILoveReptiles]

To anyone who is noticing erratic behavior on their PC - IE: timed shutdowns, system instability...

There's a virus that's wreaking havoc and spreading itself through the internet like wildfire. We got hammered by it here at work too.

It's called the W32.Blaster.Worm virus.

There's a fix for it though:

Story (and link to patch so it doesn't hit you again):
http://slashdot.org/articles/03/08/1...id=190&tid=201
Link to Symantec (norton) fix for the virus:
http://securityresponse.symantec.com...ster.worm.html

Keep in mind this virus is not spreading via email -- it is sneaking in through TCP Ports 4444 and 135, and UDP port 69, so if you have a firewall, CLOSE THESE PORTS!

[lovemyshiba]

Thanks for posting this.

My computer at home got hit yesterday, and we had it fixed in a few hours (a friend of the hubby's who works at Best Buy gave us the disk).

From what I have read about it, it isn't even as strong as it is supposed to get--the most damage is scheduled for August 16, and to continue through December.
I read that here:
http://story.news.yahoo.com/news?tmp...6233_2003aug11

I hope everyone's computers stay healthy!!!

[ILoveReptiles]

Please update your virus scanners as well - for those of us using Symantec's Norton Antivirus, the latest definitions that should take care of this virus are as follows: 8/11/2003 Revision #19

[lizbud]

My home computer has the virus, I'm sure. It kept crashing last night. It wouldn't stay up long enough for me to download
the patch to fix it. BUMMER.... I've downloaded the security
patch to diskette here at work & will try to run it when I get home
tonight.

Lovemysheba,

What's the disk from Best Buy called ? What else might I need
to fix my home pc? I have Windows XP at home. I swear I will
never ignore the update prompts again. Help, Liz.

[zippy-kat]

I can't get either of the links to work?

EDIT: The second link still won't work for me but the first will.

[ILoveReptiles]

I just fixed the links... they were messed up - sorry

They should both work now.

Anyway, I got this off of slashdot.org:

--- snip ----

I got the worm yesterday, and found that when the "shutdown" popup appears, just reset the system time... you have a full minute to that. I just pushed the data back one year, and the shutdown is postponed a year! then you can run a full system virus scan, and repair tools

Regards/
JP
--- /snip ---

and

--- snip ---
My friend was getting hit constantly by this worm yesterday. The box wouldn't stay up long enough for him to install the patches :P. Just a tip for those of you who are getting hit a lot and having your box reboot: To stop those pesky reboots try:

shutdown /a

That should abort the shutdown and give you enough time to install patches. This also works well when you install a piece of software that trys to force you to reboot. (Why he hadn't fixed it already is a mystery, especially since slashdot.org is his homepage.)
--- /snip ---

[ILoveMyAbbyGirl]

How do I close those ports you mentioned?

[ILoveReptiles]

Originally posted by ILoveMyAbbyGirl
How do I close those ports you mentioned?

You need a firewall to close the ports. Hardware or Software.

A good software firewall is ZoneAlarm. It's free too I believe.

you can get it here:

http://www.zonealarm.com/

[tomkatzid]

http://housecall.antivirus.com/housecall/start_corp.asp

here is a free on line virus checker, we all use it at work, seems to tell you what you need to know and how to fix it. we are all clear at home, so far.
Katz

[ramanth]

Thankfully our IT was on the ball and beefed up internet security so to speak.

*squishy, squishy*

[CathyBogart]

Is it the same if you're behind a hardware firewall, or are you just talking about software ones?

I installed the windows prevention thingy anyways, just curious.

[luckies4me]

Great I have a virus already, W32.Kwbot.C.Worm and I cannot get rid of it. Norton gives you instructions but youhave to get into the registry and I don't know how to do that and am afraid I am going to screw up the computer.


This will just make me more susceptible to getting this one.


If I have Norton and I just updated it last night should I be protected?

[lovemyshiba]

Lizbud,
I don't remember what it was, and my husband took it to work with him today.
I know it was an update disk or something for windows XP, and that's the end of my knowledge.

My computer also kept doing a timed shutdown, and we couldn't keep it on long enough to fix it at first.

I always ignore the update prompts too

[ILoveReptiles]

Originally posted by WolfChan
Is it the same if you're behind a hardware firewall, or are you just talking about software ones?

I installed the windows prevention thingy anyways, just curious.

My LAN at home is running behind a hardware firewall - it works the same for that. I just block out all those ports and nobody can get in.

My systems are safe.

But yes, you should install the patch.

[ILoveReptiles]

Originally posted by luckies4me
Great I have a virus already, W32.Kwbot.C.Worm and I cannot get rid of it. Norton gives you instructions but youhave to get into the registry and I don't know how to do that and am afraid I am going to screw up the computer.


This will just make me more susceptible to getting this one.


If I have Norton and I just updated it last night should I be protected?

If your virus definitions when you open up Norton show up as version 8/11/2003 Revision #19, then yes, you are all up to date.

I guess you have a different virus though - you're going to have to go into the registry - just follow their instructions to the letter and you should be fine.