Blaster Worm

[Theologian in Training]

XP does not play well with 98 or 2000. Getting them to converse on a network is a pain.

THe viri out there seem to be attracted to it. My kids games don't work on it.

The drivers have been known to disappear for no apparant reason The registry is more confusing than  the oldies. And it hides things better.

Hmmm...never encountered those problems. I knew one guy who still wanted 98 and XP, so I partitoned his drive and have both running on their respective partitions. No problems at all. As with the network problem, I have never had that problem either, although, the computers are going through a router, and one can see the other and vice versa, even, in my case, without File and Print sharing installed.

The virii are indeed attracted to them, because it is easier to write a virus for an MS OS than a *nix or Mac machine. In some cases it is a little code written in vbs.

The driver issue I have never encountered.

The registry seems the same to me, but I have also worked with both 9x machines and NT. XP seems to have the best of "both worlds"

Maybe I will encounter those issues you experienced some time down the line.

God Bless

[littleflower+JMJ]

XP is really bad, i mean not just with viruses and stuff, it came out and microsoft left Alot of flaws in it. .....you have to be constantly running all the windows upgrades, if not, you leave abunch of gaps that outsiders can grab control of your computer..

now i still don't know about this worm stuff...its quite frankly giving me a headache....

so i go to trendmicro? where do i go to get a screening to check if i have it?

you know when i was upgrading someother updates from microsoft, a DOS window came up, does that mean i have the worm??? :blink:

[IcePrincessKRS]

:huh: I run XP and I haven't had any problems....

[ironmonk]

If you have XP or 2000 you must install the patch. (If you are using Win XP, it's the 32 bit version)

The worm comes in through a service that runs in the background. It does not come through email. If you have a router or firewall, you should be protected, but you still need to install the patch.

Get the patch here:

http://www.microsoft.com/technet/treeview/...in/MS03-026.asp

Here is an article from Microsoft:

It is very important that you check the Security site regularly for the most recent news: http://go.microsoft.com/?linkid=221043

In This Newsletter:

--Who Is Vulnerable

--4 Steps for Home Users

At 11:34 A.M. Pacific Time on August 11, Microsoft began investigating a worm reported by Microsoft Product Support Services (PSS). A new worm commonly known as W32.Blaster.Worm has been identified that exploits the vulnerability that was addressed by Microsoft Security Bulletin MS03-026. Who Is Vulnerable? Users of the following products are vulnerable to infection by this worm:

. Microsoft® Windows NT® 4.0

. Microsoft Windows® 2000

. Microsoft Windows XP

. Microsoft Windows Server 2003

Your computer is not vulnerable to the Blaster worm if either of these conditions apply to you:

. If you are using Microsoft Windows 95; Windows 98; Windows 98 Second Edition (SE); or Windows Millennium (Me).

. If you downloaded and installed security update MS03-026 prior to August 11, the date the worm was discovered.

4 Steps for Home Users

If you are using Windows NT 4.0, Windows 2000, Windows XP, or Windows Server 2003, you should follow the steps in this sequence to help protect your system and to recover if your system has been infected.

1. Enable a Firewall: Make sure you have a firewall activated to help protect your computer against infection before you take other steps. If your computer has been infected, activating firewall software will help limit the effects of the worm on your computer.

The latest Windows operating systems have a firewall built in. Windows XP and Windows Server 2003 users should print or save the following instructions for how to enable their firewall.

If your computer is rebooting repeatedly, disconnect from the Internet before you enable your firewall. To disconnect your computer from the Internet:

. Broadband connection users: Locate the cable that runs from your external DSL or cable modem to the wall and unplug that cable either from the modem or from the telephone jack.

. Dial-up connection users: Locate the telephone cable that runs from the modem inside your computer to your telephone jack and unplug that cable either from the telephone jack or from your computer.

Follow the instructions provided for your operating system, and then reconnect to the Internet.

. Windows XP Professional users: http://go.microsoft.com/?linkid=221044

. Windows XP Home Edition users: http://go.microsoft.com/?linkid=221045

. Windows Server 2003 users: http://go.microsoft.com/?linkid=221046

. Windows NT 4.0 and Windows 2000 users: You will need to install a third-party firewall. Most firewall software for home users is available in free or trial versions. If you are unable to download a firewall product, please check with your local computer retailer. Check the following resources for more information on personal firewalls:

-- ZoneAlarm Pro (Zone Labs): http://go.microsoft.com/?linkid=221047

-- Tiny Personal Firewall (Tiny Software): http://go.microsoft.com/?linkid=221048

-- Outpost Firewall (Agnitum): http://go.microsoft.com/?linkid=221049

-- Kerio Personal Firewall (Kerio Technologies): http://go.microsoft.com/?linkid=221050

-- BlackICE PC Protection (Internet Security Systems): http://go.microsoft.com/?linkid=221051

Windows 2000 users: Alternatively, you can take steps to block the affected ports so that your computer can be patched. Here are some modified instructions from the TechNet article HOW TO: Configure TCP/IP Filtering in Windows 2000: http://go.microsoft.com/?linkid=221052.

2. Update Windows: If you are disconnected from the Internet, remember to reconnect before you take the next steps. Download and install the security update addressed in Security Bulletin MS03-026 for the version of Windows that you are using from the Microsoft Download Center.

-- Windows NT Server 4.0 and Windows NT Workstation 4.0: http://go.microsoft.com/?linkid=221053

-- Windows NT Server 4.0, Terminal Server Edition: http://go.microsoft.com/?linkid=221054

-- Windows 2000:

http://go.microsoft.com/?linkid=221055

-- Windows XP: The vast majority of Windows XP customers use this version. If you are unsure, it is likely that you are using this version. http://go.microsoft.com/?linkid=221056

-- Windows XP (64 bit): The 64-bit version of Windows XP requires special hardware to run. If you are unsure, it is likely that you are not running this version of Windows XP.

http://go.microsoft.com/?linkid=221057

-- Windows Server 2003:

http://go.microsoft.com/?linkid=221058

-- Windows Server 2003 (64 bit): http://go.microsoft.com/?linkid=221059

3. Use Antivirus Software: Make sure you have the latest updates installed.

. If you already have antivirus software installed, go to your antivirus vendor's Web site to get the latest updates, also known as virus definitions.

. If you do not have antivirus software installed, get it. If you are unable to download antivirus software, please check with your local computer retailer. The following vendors participating in the Microsoft Virus Information Alliance

(VIA) offer antivirus products for home users:

. Network Associates: http://go.microsoft.com/?linkid=221060

. Trend Micro: http://go.microsoft.com/?linkid=221061

. Symantec: http://go.microsoft.com/?linkid=221062

. Computer Associates : http://go.microsoft.com/?linkid=221063

Learn about Microsoft's Virus Information Alliance: http://go.microsoft.com/?linkid=221064.

4. Remove the Worm: If you think there is even the slightest possibility that your computer might be infected, use the worm removal tool available at your antivirus vendor's Web site. For additional details on this worm from antivirus software vendors participating in the Microsoft Virus Information Alliance (VIA) please visit the following links:

-- Network Associates: http://go.microsoft.com/?linkid=221065

-- Trend Micro: http://go.microsoft.com/?linkid=221066

-- Symantec: http://go.microsoft.com/?linkid=221067

-- Computer Associates: http://go.microsoft.com/?linkid=221068

Microsoft Communities is your launching pad for communicating online with peers and experts about Microsoft products, technologies, and services: http://go.microsoft.com/?linkid=221041

~~~~~~~~~~~~~~~~~~~~~~~~~ How to use this mailing list~~~~~~~~~~~~~~~~~~~~~~~~

To cancel your subscription to this newsletter, either click mailto:1_51096_1778936D-2DB1-1E4E-9842-8737823B99BB_US@Newsletters.Microsoft.com?subject=UNSUBSCRIBE

to send an unsubscribe e-mail or reply to this message with the word UNSUBSCRIBE in the Subject line. To stop all e-mail newsletters from microsoft.com, either click mailto:2_51096_1778936D-2DB1-1E4E-9842-8737823B99BB_US@Newsletters.Microsoft.com?subject=STOPMAIL

to send your request or reply to this message with the word STOPMAIL in the Subject Line. You can also unsubscribe at http://go.microsoft.com/?linkid=221042. You can manage all your Microsoft.com communication preferences from this site.

THIS DOCUMENT AND OTHER DOCUMENTS PROVIDED PURSUANT TO THIS PROGRAM ARE FOR INFORMATIONAL PURPOSES ONLY. The information type should not be interpreted to be a commitment on the part of Microsoft and Microsoft cannot guarantee the accuracy of any information presented after the date of publication. INFORMATION PROVIDED IN THIS DOCUMENT IS PROVIDED 'AS IS' WITHOUT WARRANTY OF ANY KIND. The user assumes the entire risk as to the accuracy and the use of this document.

microsoft.com newsletter e-mail may be copied and distributed subject to the following conditions: 1. All text must be copied without modification and all pages must be included 2. All copies must contain Microsoft's copyright notice and any other notices provided therein 3. This document may not be distributed for profit

[ironmonk]

XP is really bad, i mean not just with viruses and stuff, it came out and microsoft left Alot of flaws in it. .....you have to be constantly running all the windows upgrades, if not, you leave abunch of gaps that outsiders can grab control of your computer..

now i still don't know about this worm stuff...its quite frankly giving me a headache....

so i go to trendmicro? where do i go to get a screening to check if i have it?

you know when i was upgrading someother updates from microsoft, a DOS window came up, does that mean i have the worm???             

It wasn't a dos window... it was a "Command Promt"

That's common when doing updates; no worries.

XP is the most secure that Microsoft has put out. All OS's have holes.

You can turn your XP firewall on by:

http://www.microsoft.com/windowsxp/pro/usi...working/icf.asp

God Bless!!

ironmonk

[ryanmeyersmusic]

i got it... didn't know that's what i had, though, since my internet was down because of it...

had to reformat...

oh well... could have been worse...

[ironmonk]

I think that's the best way to deal with stuff like that... we should reformat about every 8 months anyway

God Bless,

ironmonk

[littleflower+JMJ]

this stuff makes me just want to just chunk my computer out the window and just buy a brand-spankin' new Dell Laptop!!!

yeahhhhhhh, that sounds real good right now!!! i mean i really want a dell laptop......

:lol:

[IcePrincessKRS]

this stuff makes me just want to just chunk my computer out the window and just buy a brand-spankin' new Dell Laptop!!!

yeahhhhhhh, that sounds real good right now!!! i mean i really want a dell laptop......

They are SOOOO nice Flowery!!! Thats what I use. :D

[Adam]

I hate Dells, wouldn't touch one.

And I got that virus and I even updated windows before hand.. :(

[cmotherofpirl]

THere is no one program out there that can protect you. I was hacked and virused and wormed with an updated Norton.

You need to periodically run an different program just to check to make sure everything is caught.

THere are several free virus scans on the net you can use.

[littleflower+JMJ]

They are SOOOO nice Flowery!!! Thats what I use. :D

you know it ice! dells are sweeeet!!

[VanHooty]

I wasn't infected myself. I normally keep myself up to date on such things.

Granted, Macs become appealing for a split second after news of a virus breaks out.

[ironmonk]

Dells are great... That's all we buy at the office... they give the best bang for the buck. High quality components and they're cheaper than building it yourself. We have a Network of about 70 PC's and we also have a wide area network of 4 offices... Dell all the way... rarely do we have problems.

There is software and hardware that can protect you.

If your on a cable modem or DSL, I suggest getting a Linksys 4 Cable Router for about $50, it acts as a hardware firewall... I also suggest having a software firewall also... I use Norton Personal Firewall. You can get Zone Alarm free from www.ZoneLabs.com Just read all the instructions.

Even if you are on a phone line, I suggest getting Zone Alarm.

The blaster worm does not come from email, it comes in through a service called "messenger" (not the chat program).

You can turn this off if you have XP or 2000.

The way to do that is:

Go to Start

Then go to Settings

Then open the Control Panel

Click on Administrative Tools

Then click on Services

You'll get a pop up, scroll down to Messenger

Right Click Messenger

Then click on Properties

Change the dropdown from Auto to Manual

Click the Stop button

Click OK

(do not do this if you are on an office network, ask your administrator first)

God Bless,

ironmonk

[littleflower+JMJ]

hey all you computer experts!!

(i should be ashamed since i don't know since i'm goign to get certified in Networking!)

whats the best one to get for my homenetwork if i decide to go wireless?

getting a PCI or a USB card hook-up thing? (geez, i don't even know what their called)

do you know what i mean? theirs like a $10 difference and i was wondering if theres actually a difference in performance or whathaveyou...

thanks!

:blink: