About Us

If you think you may have a virus, but don't know what to do, JM Computers can help. Call us at 210-288-8247 to schedule an on-site Tech to remove the virus. We can also install software on your computer that automatically updates itself to stop viruses before they get to your computer.
 
Background

A new worm known as W32.Blaster.Worm (also known as MBlaster, W32/Lovsan.worm, MSBlast, W32.blaster.worm, Win32.posa.worm, Win32.poza.worm) has been identified that is seeking to exploit the vulnerability patched with Microsoft Security Bulletin MS03-026. Blaster is designed to launch a denial of service attack against Microsoft's Windows Update Web site. (Microsoft Web Site)

Operating systems affected: Windows XP, Windows 2000, Windows NT 4.0, Windows Server 2003

**NOTE: You should only attempt manual removal of worms and virusrs if you have advanced knowledge of computer - otherwise you may cause greater harm to your computer.

Here are the links for the files you should download and run:

Symantec Fix Tool for W32.Blaster.Worm: http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

Windows XP Patch:
http://www.microsoft.com/security

Click Here for more information on this worm and for REMOVAL INSTRUCTIONS.

Windows 2000 Patch: http://microsoft.com/downloads/details.aspx?FamilyId=C8B8A846-F541-4C15-8C9F-220354449117&displaylang=en

Here's what to do if your computer cannot even boot:

Disconnect network cable

Boot the machine

CTRL-ALT-DEL to open task manager and end process msblast.exe

Might get shut down error (if so, open command line type "shutdown -a")

Search for msblast.exe, delete it. (c:\windows\system32\)

Open Regedit, remove msblast.exe from the HKLM\Software\Microsoft\Windows\CurrentVersion\Run key. It will probably be titled windows auto update

Turn on the firewall in the advanced properties of the current network adapter the computer is using.

Renew IP, or Restart computer. Again, you might get the RPC error... (if so, open command line type "shutdown -a")

The firewall may generate errors if msblast is still running. (Double check the registry, msconfig, and that its not currently running) Kill it if it is.

If firewall works goto critical updates and install 823980. It may give you a QFE error. If this happens, download all of the updates. This should take care of it.

Update virus definitions and patch software firewalls.

Reboot.

When you come back, triple check. Is msblast.exe running?

If it is, try doing the above steps in different orders.

Viruses are very small programs that have no other purpose than to spread themselves to as many computers as possible. The analogy to a biological virus is a good one. Viruses can spread from computer to computer, they can cause software damage and data loss, but there are vaccines against getting viruses.

While not every virus will erase your files on your hard drive, they should still be taken very seriously. With the rapid growth of the Internet, viruses are spreading even more rapidly. Viruses are also becoming more and more deadly. There are already thousands of different viruses and new ones emerge every week. Click Here to get info on the latest viruses.

Preventative Maintenance

• Make sure that all computers have anti-virus software installed (see recommendations below)

• Update your virus definition files from the manufacturer's website at least once a month

• Most viruses are spread via floppy disk and e-mail attachments - scan these before you allow them on your computer.

Risks

• Update your virus tools - definition files need to be updated weekly or else you may not detect the newest viruses

• Patch your system - make sure you update your operating system for the latest patches.
• Scan everything - Many times, a virus will re-emerge even after you remove it from a company. It usually comes back from a laptop or floppy disks that were not scanned the first time - make sure you thoroughly scan ALL computers and disks for viruses.

Resources for support

Housecall.antivirus.com - This site offers a free scan online by using an ActiveX applet. It is updated every few days on the latest viruses.

www.mcafee.com - Network Associates owns McAfee, one of the best anti-virus products. They provide a free anti-virus scan of your computer over the internet.

www.cert.org - CERT stands for Computer Emergency Response Team. CERT operates from Carnegie-Mellon University and issues virus warnings and other computer-related emergency alerts to the public. This is a very reliable source of information.

©Copyright 2003 JM Computers All Rights Reserved.