GREG 1
Member
Registered: 28th Jul 00
Location: Essex
User status: Offline
|
Right i need your help
I was having loads of probs yesterday and ive sorted that problem but now ive got another !
* I cant open up my U2U's and i have 2
* I cant open up my e-mails from my MSN Messenger
Anyone know why or how i can get it going ?
[Edited on 22-01-2007 by Ian]
|
Andy Stocker
Member
Registered: 31st Aug 00
Location: Herts Drives: Porsche 911
User status: Offline
|
Do you have a pop up killer?
|
GREG 1
Member
Registered: 28th Jul 00
Location: Essex
User status: Offline
|
Not sure mate
|
Skinz
Member
Registered: 15th May 03
User status: Offline
|
Greg the utu's are from me, u need to reverse wot u did yesterday and then read the web links i sent in ur utu's and patch ur machine up
|
GREG 1
Member
Registered: 28th Jul 00
Location: Essex
User status: Offline
|
Im not getting that error anymore mate it was all ok last night !
I had my u2us open about 2 hours ago
|
Andy Stocker
Member
Registered: 31st Aug 00
Location: Herts Drives: Porsche 911
User status: Offline
|
I got a pop up killer that stops me opening any pages when i click on links etc
|
GREG 1
Member
Registered: 28th Jul 00
Location: Essex
User status: Offline
|
How do u take that off then ??
It was ok a few hours back now i cant check u2us etc
|
GREG 1
Member
Registered: 28th Jul 00
Location: Essex
User status: Offline
|
SKINZ - i cant do the reverse cos it wont open up that links (like it wont my U2U's)
|
Skinz
Member
Registered: 15th May 03
User status: Offline
|
Greg read this from wot u have told me u have the W32/Blaster-A worm and if you haven't disenfected it and got the patch from microsoft then u need 2, read that link
http://www.sophos.co.uk/support/disinfection/blastera.html#8
[Edited on 12-08-2003 by Skinz]
|
GREG 1
Member
Registered: 28th Jul 00
Location: Essex
User status: Offline
|
FCUKING HELL
I cant even open that link !!
|
Skinz
Member
Registered: 15th May 03
User status: Offline
|
W32/Blaster-A disinfection instructions and FAQ
At the time of writing, W32/Blaster-A (also known as: W32/Lovsan.worm, W32.Blaster.Worm, WORM_MSBLAST.A) is spreading in the wild. W32/Blaster-A is a worm that scans networks looking for computers vulnerable to Microsoft's DCOM RPC security exploit. On finding a suitable victim the worm causes the remote machine to acquire a copy of the worm using TFTP, which is saved as msblast.exe in the Windows system folder.
1. How do I prevent W32/Blaster-A spreading on my network?
2. How do I remove W32/Blaster-A automatically?
3. How do I remove W32/Blaster-A manually?
4. Which systems are affected?
5. How did my computer become infected?
6. Background technical information
7. Where should I put the W32/Blaster-A virus identity (IDE) file?
8. My computer is continuously rebooting, how can I download RESOLVE?
1. How do I prevent W32/Blaster-A spreading on my network?
Network administrators are strongly advised to perform the following operations to limit the impact of the worm
Download and deploy Microsoft patch MS03-026
W32/Blaster-A exploits a vulnerability that can be patched. To read more about the vulnerability and download the patch for deployment, go here. On standalone computers, update with all relevant security patches from Windows update.
Administrators are advised to deploy the patch to internet enabled workstations and internal company networks, paying particular attention to proxy/gateway computers.
Rename tftp.exe
The worm utilises tftp.exe, a Windows native program. If tftp.exe exists on your network, and you have no business need for it, rename it (e.g. to tftp-exe.old). You should not delete it as future legitimate software may require it.
Block traffic to certain ports on your firewall
Administrators should block incoming traffic on the following ports:
tcp/69 (used by the TFTP process)
tcp/135 (used by RPC remote access)
tcp/4444 (used by this worm to connect)
This should primarily be implemented on your internet firewall. Where appropriate, you should also block access to these ports to prevent access from potentially infected non-trusted networks.
2. How do I remove W32/Blaster-A automatically?
W32/Blaster-A can be removed from Windows 95/98/Me/NT/2000/XP computers automatically with RESOLVE
download the RESOLVE W32/Blaster-A self-extractor and double-click it (the contents will extract to C:\SOPHTEMP)
select Start|Run then type cmd (on Windows 95/98/Me type command) to open a command prompt
click OK
to remove the worm non-interactively type
C:\SOPHTEMP\RESOLVE.COM -DF=BLASTERA.DAT -NOC
and press the Enter key
.
The above process will remove the infected file from memory, clean the registry and remove the infected file from the system.
After removing the worm you should install the patch mentioned above.
You can find detailed instructions on running RESOLVE in the notes enclosed in the self-extractor.
To remove W32/Blaster-A on other platforms please follow the instructions for removing worms.
|
GREG 1
Member
Registered: 28th Jul 00
Location: Essex
User status: Offline
|
waht do i need to DL mate ??
I cant use tha tlink to get to the packages
|
Andy Stocker
Member
Registered: 31st Aug 00
Location: Herts Drives: Porsche 911
User status: Offline
|
Can you click on your link in your sig to buy your own CD's????
|
GREG 1
Member
Registered: 28th Jul 00
Location: Essex
User status: Offline
|
Nope
|
Rob R
Member
Registered: 31st May 03
Location: Kent
User status: Offline
|
i cant open my bt broadband homepage, jus get a blank page and its the same when i try goin onto the hotmail website. also i cant seem to access drop down menus i.e. on the autotrader website. only happened since yesterday. also i cant see the programs in program files even though ive clicked "show all programs" wtf is goin on there?!
|
GREG 1
Member
Registered: 28th Jul 00
Location: Essex
User status: Offline
|
Thats my problem, i can click or open links.... everything else is ok
|
Skinz
Member
Registered: 15th May 03
User status: Offline
|
Does typeing a url into the browser work like www.bbc.co.uk ??
|
GREG 1
Member
Registered: 28th Jul 00
Location: Essex
User status: Offline
|
i can go to webpages.... i just cant open any links like my one at the bottom here and u2us etc
|
Skinz
Member
Registered: 15th May 03
User status: Offline
|
right ok, then copy and paste this link into a new browser window
http://www.sophos.co.uk/support/disinfection/blastera.html#8
When this open find the bit u need to download right click on the link and goto 2 properties and then copy the url and tpe it into a new window, pain in the arse but it should work
|
GREG 1
Member
Registered: 28th Jul 00
Location: Essex
User status: Offline
|
ive gone in there downloaded the certain thing followed the steps but i dont have a folder they are after
|
GREG 1
Member
Registered: 28th Jul 00
Location: Essex
User status: Offline
|
i personally dont think i still have a virus, seems just like i have turned off a function to enable me to open links ?!?!
|
Skinz
Member
Registered: 15th May 03
User status: Offline
|
fair enough, seems a bit weird that u were getting the exact same syptoms yesterday as this virus, oh well
|
GREG 1
Member
Registered: 28th Jul 00
Location: Essex
User status: Offline
|
you might be right mate,,, seems strange i could open my u2us earlier and not now
|
GREG 1
Member
Registered: 28th Jul 00
Location: Essex
User status: Offline
|
Arghhhhhhhhhhh !!
|
CraigyG
Member
Registered: 20th Oct 02
Location: Newcastle Upon Tyne
User status: Offline
|
its got nuffin to do with that virus that just shuts ya pc down when u connect to the net !!! greg u got a firewall !!!
|
