Blaster after XP SP2 2055

You must have turned-off your firewall. You should not be installing
the beta version of SP2 unless you understand the ramifications of using
beta software on a production machine. Proper beta testing should only
be performed on a "test machine" that you don't mind reformatting the
hard drive on.

What You Should Know About the Blaster Worm and Its Variants
http://www.microsoft.com/security/incident/blast.asp

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-------------------------------------------------------------------------------------------------------

"tony" wrote in message:
...

| After uninstalling XP SP2 2055, i have got a blaster worm. But before i have not get it.
| How it can be due to ?

When or if you get the shutdown message...

Go to; Start -- Run
enter; shutdown -a

This will halt the shutdown and give you a chance to Download the McAfee worm removal tool,
Stinger: http://vil.nai.com/vil/stinger/ and install following patch for the RPC/RPCSS
Buffer Overflow Vulnerability that is addressed by Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

Please read: http://www.microsoft.com/security/incident/blast.asp

You also need a FireWall. If you don't patch the PC and not use a FireWall then you will
just be re-infected.

I also suggest the installation of *ALL* MS Critical Updates ASAP.

Dave




"tony" wrote in message
...
| After uninstalling XP SP2 2055, i have got a blaster worm. But before i have not get it.
| How it can be due to ?

Greetings --

If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/ven...ster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/ven...oval.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com...chia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/ven...oval.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH


"tony" wrote in message
...
After uninstalling XP SP2 2055, i have got a blaster worm. But
before i have not get it.
How it can be due to ?