HONDA PILOT .ORG
hondapilot.org HONDA PILOT .ORG Archive > Site Related > Software Related Questions & Answers
 
W.32.Blaster.Worm - Click HERE for Original Thread
wwong
Anyone else besides me catch this? It shuts down your internet access everytime you log on. Fortunately, there is a removal tool from Symantec. Just download to a floppy and run.
http://securityresponse.symantec.co...moval.tool.html
PaulV7
nope I had the ports blocked on my router at work and home. I know alot of people and companies that got it. Some very unhappy business out there right now.
yolk
Thanks for the link, but don't need it - running a Mac :2:
rtresco
Our network admin had already installed the required update for us, but our largest client got hit at corporate. :3:
Ziploc
I got the damn thing at home but haven't had time yet to do anything about cleanup. I'll check out the Symantec site ASAP, wwong--thanks!
rtresco
quote:
Originally posted by Ziploc
I got the damn thing at home but haven't had time yet to do anything about cleanup. I'll check out the Symantec set ASAP, wwong--thanks!


Hey Ziploc. Sorry to hear that. Were you using anything like a hardware/software firewall to protect your computer?
wwong
Ziploc: If your computer at home is infected with this worm, you will not be able to download the fix from your home computer. You have to have access to a healthy computer to download the fix to a floppy, then insert the floppy to your infected computer and run the fix. That's how I got rid of the worm on my home computer. Good luck.
kemosabe
Ziploc: Here's another fairly simple solution offered by the Washington Post newspaper in today's edition: Your PC Infected? Here's the Fix :)
Ziploc
quote:
Originally posted by rtresco


Hey Ziploc. Sorry to hear that. Were you using anything like a hardware/software firewall to protect your computer?



Let's put it this way: I thought I was protected! We recently had a computer geek come to the house. We thought, along with cleansing the machine of some viruses (yes, we had up-to-date McAffee), he had installed a firewall...but we must have misunderstood.
Ziploc
quote:
Originally posted by kemosabe
Ziploc: Here's another fairly simple solution offered by the Washington Post newspaper in today's edition: Your PC Infected? Here's the Fix :)


So, considering what wwong said, I have to download any "fix" onto a floppy from a "clean" computer before I can do anything with the home computer?
kemosabe
quote:
Originally posted by Ziploc


So, considering what wwong said, I have to download any "fix" onto a floppy from a "clean" computer before I can do anything with the home computer?


If you follow the Washington Post directions, you won't need to make a floppy...

...but then again, I don't know if what the Post is suggesting will work, either! I just saw and read the article this morning and thought the solution it offered looked pretty simple... :)
Ziploc
quote:
Originally posted by kemosabe

If you follow the Washington Post directions, you won't need to make a floppy...

...but then again, I don't know if what the Post is suggesting will work, either! I just saw and read the article this morning and thought the solution it offered looked pretty simple... :)



Yeah, me, too--somebody at work passed along a copy of the Post article. On first reading, it sounded simpler than some of the other stuff I came upon in searching on line. But when it comes to me and computer problems, nothing is ever simple!
wwong
Ziploc:

I'm no computer geek. When my computer got infected with this worm, I was going to bring my hard drive into work and have our IT guy fix it. But I didn't have too. After downloading the fix onto a floppy and running it on your home computer, you then have to go the microsoft support and download the patch. After that, your computer is completely healthy and you are ready to surf again!
krygny
quote:
Originally posted by PaulV7
nope I had the ports blocked on my router at work and home.


Any firewall/router should protect you from this type of scan without selectively blocking ports. My Win2K box at work got wormed, but I had no problem running Symantec's fix and downloading the patch. My WinXP box at home (behind a Linksys router) was clean but I installed the patch anyway.

I'm very careful about which MS patches I install; only the ones I know I need. I think everybody running Win2K or WinXP should install this patch, otherwise the vulnerability is still there and it shouldn't be.

But you should do it before Saturday. I have a mind to remove the patch and install the worm on all my PCs, just so they can participate in the DOS attack against Microsoft's site on Saturday.

:22: :22: :22: :22: :22: :22: :22: :22:
PaulV7
quote:
Originally posted by krygny


Any firewall/router should protect you from this type of scan without selectively blocking ports.




Most typical home linksys type routers will block a port scan because 99% of people with a linksys router are using NAT. The router will receive a packet directly to it and not to 1 of machines in the packet allocation table. Then the router will just ignore the packet. So yes in that case a router will work.

At my office with our big router, having some machines on a NAT and others having static IP's, it will send the packet straight on to the machine. That is why blocking ports is always good. Plus there are ways past routers with open ports so why take the chance.

Powered by: Search Engine Indexer and vBulletin v2.3.2
Copyright © 2000 - 2002, Jelsoft Enterprises Limited
Copyright 2000 hondapilot.org. All Rights Reserved.