WORM BLASTER VIRUS

  • Thread starter Thread starter Pam
  • Start date Start date
P

Pam

Yesterday my computer was shutting itself down &
rebooting itself every few minutes. After some research,
I found out that this is an indication of the dreaded
WormBlaster. After completing all instructions to a "T"
it said the worm was not found on my computer! I
repeated it twice, even disabling the systems they
recommeded in case it was hiding somewhere else. Nothing
found. What was that all about? The problem has not
reappeared. Thanks!
 
1. Click Start, Run and then type: shutdown -a

This prevents the system from automatically restarting long enough
for you to download and install the Microsoft security update.

2. Click OK.
3. If the "shutdown -a" command fails to keep the computer from
restarting, use the following steps:

a. Click Start, Run, and then type: services.msc

A Services window appears.

b. Click OK.
c. Double-click Remote Procedure Call (RPC) and select the
Recovery tab. Be careful to not use the Remote Procedure Call
(RPC) Locator item.
d. Set the First Failure, Second Failure, and Subsequent Failures
items to Take No Action.
e. Click OK to apply the settings.

4. Install the latest critical updates using Windows Update. For more
information, go to the following Web sites:

* Microsoft's Security Bulletin: MS03-0266:

http://tinyurl.com/is2b

-or-

http://www.microsoft.com/downloads/details.aspx?FamilyID=2354406c-c5b6-44ac-
9532-3de40f69c074&displaylang=en


5. Remove the worm using your antivirus software. Do this by
attaining the latest virus definitions and then performing a scan.
For more detailed information go to the following Web sites:

* McAfee's VirusScan Web page on the W32/Lovsan.worm virus:

http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100547

* Symantec's Norton AntiVirus Web page on the 32.Blaster.Worm
virus.

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.htm
l

NOTE: Clicking the links may give an error indicating it is
invalid. If this occurs, copy the portion of the address
on the second line and paste it at the end of the address
showing in your browser.

If all went well, the computer is now clean and protected. If
these steps did not resolve the problem, contact Microsoft and your
anti-virus software vendor for additional assistance.


6. If you used the "services.msc" command (as explained above in
Step 3) to prevent your computer from restarting, restore your RPC
recovery settings to their original state as follows:

a. Click Start, Run, and then type: services.msc
b. Click OK.
c. Double-click Remote Procedure Call (RPC) and select the
Recovery tab. Be careful to not use the Remote Procedure Call
(RPC) Locator item.
d. Set the First Failure, Second Failure, and Subsequent Failures
items to Restart the Computer.
e. Click OK to apply the settings.


NaresH KumaR
 
Back
Top