Has anyone else met W32.Blaster.Worm yet?

[Lord Bracknell]

Nasty little bugger.

Took all morning to get rid of it.

 

[Braders]

 

[fatbadger]

just got a warning from our IT people - it appears it has turned up in our midst (although not, apparently, on my PC yet).

 

[bigc]

i bloody have!

Lord B, How'd you get rid of it, i've stopped the restarting, but its still there i think

 

[Lord Bracknell]

What it does is give you a minute's warning that your computer will be shut down.

And then it shuts your computer down.

Save those documents!

 

[bigc]

its damned annoying aint it?

 

[Marshy]

How do you get rid of it then ?
A friend has just rang me to say her machine is shutting down with what sounds like that message.

NT authority system message, your machine will shut down in 60 secs or omething like that she sais.

Any advice welcome please.

 

[Lord Bracknell]

i bloody have!

Lord B, How'd you get rid of it, i've stopped the restarting, but its still there i think

Get rid of it with the help of symantec's assistance and a Microsoft patch.

It was "discovered" yesterday and reached my machine yesterday evening, a few hours before I got my Norton anti-virus update. So it slipped through.

It's a classic cyber warrior's product:-

The worm contains the following text, which is never displayed:

I just want to say LOVE YOU SAN!!
billy gates why do you make this possible ? Stop making money and fix your software!!

Only affects Windows 2000 and Windows XP.

 

[Lush]

Sounds like what Danny Seagull had yesterday.

Macs always seem to be pretty free of this stuff.

 

[Cian]

sigh :-(

deleted if off FIVE PC's so far, none of them mine, BTW, because I don't use Windows. My PC Farm here is safe from any virii beginning with W32 and W97!

Not too hard to clear after the first time

 

[marvin]

How does this thing get on the computer in the first place?

 

[BrightonBird]

Can I ask what is it?

 

[hart's shirt]

What about Windows ME?

 

[tedebear]

yep we seem to have it at home - shall attack it with some worm killing software this eveing I think...

 

[Lord Bracknell]

How does this thing get on the computer in the first place?

Through Port 135 - if running unpatched (RCP vulnerable) version of Windows.

Or so I'm told by the resident technical expert here at Bracknell Towers.

 

[marvin]

So in theroy properly set-up firewall should stop it then.

 

[Yorkie]

I have XP so downloaded the patch this morning. Fortunately I have a good firewall so it hadn't got me.