1. Join Now

    AVForums.com uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Update XP and W2K now !!

Discussion in 'Desktop & Laptop Computers Forum' started by HMHB, Aug 12, 2003.

  1. HMHB

    HMHB
    Distinguished Member

    Joined:
    Nov 11, 2001
    Messages:
    25,561
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    166
    Location:
    Nottinghamshire
    Ratings:
    +3,892
    Anyone who is on Windows XP or Windows 2000 should do an update now if they haven't already done so. There is a virus (worm type) creating a bit of havoc at the moment which Microsoft issued a patch for back in July - but a lot of people aren't running the auto update and so have been infected.
     
  2. Chris Muriel

    Chris Muriel
    Well-known Member

    Joined:
    Jun 14, 2002
    Messages:
    7,110
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    136
    Location:
    Manchester
    Ratings:
    +713
    I got caught last night. I phoned our Computer support dept. but the worm was too new for them to have any decent advice.

    I am in the clear now.
    You need the latest virus defs (dated yesterday or today) and even then they are not guaranteed to spot it !

    Clues : You get an error message to the effect that svchost.exe is closing down .
    (result of this is that some windows functions are disabled e.g. “Start-search” will not work.).
    It’s quite inconvenient running a PC with Service Control Manager disabled.

    Check "Processes" in Task-Manager ; if you see "msblast.exe" you have the worm.
    It normally installs it in \Winnt\system32\ folder (make sure you can "view all files " including system files).

    It cleverly uses TFTP (Trivial FTP) to download and install the program/worm from a remote site. It listens on UDP port 69 but may also use other ports.


    Once you or your virus-checker has cleared it, reboot before downloading Microsoft security patch KB 823980.
    I suggest a further reboot and closing all other programs before running the patch.

    A final reboot is then needed before your system is clear.

    Chris Muriel, Manchester.
     
  3. HMHB

    HMHB
    Distinguished Member

    Joined:
    Nov 11, 2001
    Messages:
    25,561
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    166
    Location:
    Nottinghamshire
    Ratings:
    +3,892
    I posted this in the general forum as well as here. So if anyone wants further information:-
    Virus Warning
     
  4. zAndy1

    zAndy1
    Distinguished Member

    Joined:
    Nov 26, 2002
    Messages:
    19,794
    Products Owned:
    2
    Products Wanted:
    5
    Trophy Points:
    163
    Ratings:
    +6,952
    Glad I had a firewall tonight! Got a 'TFTP is trying to access the internet' message asking if I wanted to grant access. Of course I blocked it. Then my PC shutdown automatically for some reason, anyway I've done a scan and it seems I'm virus free but think that was a close call!

    Cheers,
    Andy.
     
  5. Pulsar

    Pulsar
    Well-known Member

    Joined:
    Jan 19, 2003
    Messages:
    2,926
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    106
    Location:
    West Midlands - Stourbridge
    Ratings:
    +292
    I got caught out by this, decided to blank all of my hard drives in an attempt to fix the problem. Oh well, I now 180 gig to fill back up.

    Rob
     
  6. Mr.D

    Mr.D
    Well-known Member

    Joined:
    Jul 14, 2000
    Messages:
    11,064
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    133
    Ratings:
    +1,150
    Damn I think I've got this. Machine seemed a little suspect recentlt ..lock ups . explorer not working on initial boot up and the svhosts.exe closing due to errors. I thought it was because I had been mucking about with my wireless network.

    I downloaded and installed AVG the other day and it certified that my machine was free of viruses. This was literally yesterday!

    I'll apply the patch.... damned if I'm doing another clean install if I can help it.
     
  7. Chris Muriel

    Chris Muriel
    Well-known Member

    Joined:
    Jun 14, 2002
    Messages:
    7,110
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    136
    Location:
    Manchester
    Ratings:
    +713
    SvcHost.exe closing with errors is a common symptom of this.
    It will stop many right-click functions working amongst other things.
    Delete any instance of msblast.exe.
    Ensure your virus-checker has latest updates.
    Install that service patch.
    The worm does NOT damage your datafiles , fortunately.
    It's a very clever/insidious mechanism that it uses.

    Chris Muriel.
     
  8. Mr.D

    Mr.D
    Well-known Member

    Joined:
    Jul 14, 2000
    Messages:
    11,064
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    133
    Ratings:
    +1,150
    Yep I've found it alright.
     
  9. MarkHudds

    MarkHudds
    Active Member

    Joined:
    Jun 12, 2002
    Messages:
    548
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    18
    Ratings:
    +4
  10. Mr.D

    Mr.D
    Well-known Member

    Joined:
    Jul 14, 2000
    Messages:
    11,064
    Products Owned:
    0
    Products Wanted:
    0
    Trophy Points:
    133
    Ratings:
    +1,150
    Latest version of AVG handles it . Just don't know why it didn't find it yesterday: its not as if its updated itself in the meantime.
     

Share This Page

Loading...