"Matthew Cegielka" wrote in message
...
Just for completeness of information, here's the CERT advisory on
Blaster that was sent out in the night:

http://www.cert.org/advisories/CA-2003-20.html

--
Matthew Cegielka
http://www.floof.co.uk
Remove MAPS to reply

Alas, I too was attacked by this worm last night. I had the box pop up
saying I had 60 seconds to save my work as Windows was going to restart. It
did.

I have a firewall running, and regularly updated anti-virus software, and
Spybot search and destroy. It still got through, the first I knew was when
the firewall crashed, then on restart it intercepted an outward packet,
trying to run TFTP. This I denied, but the system crashed every time I
connected to the net and opened Internet Explorer. So I had the virus/worm
but have managed to get rid of it with the help of online instructions from
various places.

My company have today been hit in their Scandinavian operation where 400
pc's have been infected, resulting in the WAN and business system being
closed down for much of the day until they've been innoculated and patched.

I'm now downloading a 30.6Mb file to bring my system up to date.

Dave in Ferryhill.

My company have today been hit in their Scandinavian operation where 400
pc's have been infected, resulting in the WAN and business system being
closed down for much of the day until they've been innoculated and patched.

does this mean they will finally considering switching to a decent
operating
system ?

Jean-Michel

does this mean they will finally considering switching to a decent
operating
system ?

Some of us, sadly, have no choice about whether or not to use Macrocr*p. It's
that or nothing :-(


~~~~~~~~~~
This is sent from a redundant email
Mail sent to it is dumped
My correct one can be gleaned from
h$**$*$el$**e$n$**$d$**$o$*$t**$$s$**$im$mo$ns*@a$ **o$l.c$$*o$*m*$
by getting rid of the overdependence on money and fame
~~~~~~~~~~

"nguk.." wrote in message
...

You wasn't firewalled prior to this then?


Nope Ive never used a firewall, never had a virus
or worm this is my first... oh well we all learn
something new


XP had been a pain all night (11th). Kept dropping the line, hanging and
then that bloody "save your work message".
Eventually I couldn't get on to the net. Thankfully I was running 98 in
parallel. (98 apparently not affected) Just to be shure it wasn't the ISP I
booted up 98, evrything worked fine I checked this NG and saw Neil's post.
Cheers Neil you saved me a lot of frustration.
I then went to MS and downloaded the XP update, burnt this onto a cd the
loaded it back in XP and this worked.
I've been using the freebie version off AVG this failed to detect the WORM.
When I updated AVG it found the worm but couldn't quarrantine the bloody
thing. Any ideas? (even though it's all working now)

"Mike Tullett" wrote in message
...
On Thu, 14 Aug 2003 21:50:05 +0000 (UTC), lawrence.jenkins in
wrote:
snip
When I updated AVG it found the worm but couldn't quarrantine the bloody
thing. Any ideas? (even though it's all working now)

Lawrence - first I'll suggest you turn on the inbuilt XP firewall. It's a
bit late but will stop further intrusions.

This site has good instructions on how to deal with the worm:


http://securityresponse.symantec.com...aster.worm.rem
oval.tool.html


--
Mike posted to uk.sci.weather 14/08/2003 22:20:21 UTC
Coleraine
Seeking information about the Internet and the way it works? - Subscribe
to
news:uk.net.beginners

Thankyou Mike.

"Mike Tullett" wrote in message
...
Lawrence - first I'll suggest you turn on the inbuilt XP firewall. It's a
bit late but will stop further intrusions.


I'd also suggest you switch on auto update so you get security patches as
soon as they are available.

Victor

"Mike Tullett" wrote in message
...
On Thu, 14 Aug 2003 21:50:05 +0000 (UTC), lawrence.jenkins in
wrote:
snip
When I updated AVG it found the worm but couldn't quarrantine the
bloody
thing. Any ideas? (even though it's all working now)

Lawrence - first I'll suggest you turn on the inbuilt XP firewall.
It's a
bit late but will stop further intrusions.

This site has good instructions on how to deal with the worm:


http://securityresponse.symantec.com...oval.tool.html


--
Mike posted to uk.sci.weather 14/08/2003 22:20:21 UTC
Coleraine
Seeking information about the Internet and the way it works? -
Subscribe to
news:uk.net.beginners

Don't forget to ensure that all critical updates are installed as soon
as they are available. If you use the help and support feature accessed
by clicking on the start button in XP full instructions are provided.
Microsoft provided a patch about a month ago which removes this
vulnerability. This feature can be set to work automatically although I
prefer for the system to tell me a critical update is available. I have
found that initially the Microsoft server gets overloaded by all of the
updates being downloaded at the same time so a delay of a day is
sometimes convenient.

You are not the only one to suffer; my wife's employer has been hit
which does not reflect well on their IS department. To be fair they are
so overloaded with work due to cuts imposed by senior management that
problems like this were inevitable.

Alan

After that series of update fiascos in spring I reformatted and never
bothered with Windows updates. I just use the free security utilities
that everyone knows work and leaves your Windows settings intact:

NoAds
SpyBot
AVG
ZoneAlarm and (although not needed as I have ditched Messenger
Stop Messenger Spam.

My XP Home version works as good as ever even though dated 2001. I'm
just learning the true art of surfing prior to Windows ditching IE. I
have a phenomenal browser call Mozilla; whose virtues I can not extol
too highly -principally because the virtues are inexhaustible and I'm
still finding my way around it (and the buggers are adding to it even
as I speak.)

I believe IE is being replaced with MSN E which requires Messenger;
which requires you keep in contact with Windows "all your base are
belong us" Gates at all times.

Now if I could just get hold of an early copy of Real Player or Media
Player that predates all this "you can't play that stuff on here"
kontrol!

On 17 Aug 2003 03:36:56 -0700, Michael McNeil in
. com wrote:
snip
I believe IE is being replaced with MSN E which requires Messenger;
which requires you keep in contact with Windows "all your base are
belong us" Gates at all times.

No - There are absolutely no plans to ditch IE. There is MSN 9 for those
that want it - not my cup of tea though, as it is by subscription.

Now if I could just get hold of an early copy of Real Player or Media
Player that predates all this "you can't play that stuff on here"
kontrol!
snip

You can get old versions of software he

http://www.oldversion.com/

--
Mike posted to uk.sci.weather 17/08/2003 11:26:52 UTC
Coleraine
Seeking information about the Internet and the way it works? - Subscribe to
news:uk.net.beginners