[defaye]

intro: the bug that came by mail..

it has been known to be named things like "hello again" at a size of approx 77 k. DO NOT OPEN this at all. it will infect your pc. open your address box and replicate emails to all other contacts in your personal list. posing as your email address. ie, spreading the virus quicker than ever. if you see any suspect emails. delete them, dont test them.

('o') >>>
Hello its *John de Faye* the subject for some is the....
************************************************** ********************************

W32.Blaster.Worm

if you are infected by this virus, this is what i have put together to help some. at least with all i know about the virus and my ideas to prevent it ruining your pc.
************************************************** ********************************
if you need further assistance: MSN contact Jonofeist@hotmail.com
you should help your friends, send this to others. this bug has been world widely spread. lets fix it up.


now lets start...



key: 1 - 6: John's own help to XP users.
7 - 8: NTL's help for other subjects of the crisis.

1. you must understand how this virus is working. when the pc starts up it does an automatic remote shutdown. this is because its been programmed to do that on every startup:

right click "my computer" and click "manage" for XP proffessional and home users only i think. this is from my own experience. then click "services and Applications" and finally click "services" here you will find that the bug is a remote shutdown of some sort. so work fast to find the program under 'R' for Remote. the one that has already been activated in the "status" is probabbly the one. i think something like remote shutdown or close to that.you need to de-activate it.

ie: (stop) it instead of (start).

2. now we have stopped this virus annoying us for now. i am really not sure how to help but in my own experience i then went to "ctrl alt delete" and looked through my "processes" that had happened. find the suspicious ones and shut them down. this one may also be occuring with you. process called:

"inetinfo.exe" im no expert but this seemed like a virus to me.
3. lets check our program files now. go to "my computer" and into the localdrive C:\\ and have a look at what we find. any suspicious things you should delete. they are in the main Cdrive folder i think.

*warning. please look inside the folders before you delete you may remember what they are used for. and this part of pc is what makes it work. so lets not go deleting crazy or the pc will never work again.*

4. lets scan our pc hard-drive at symatec now.. as we dont like these things lurking around when we think we have done a job well done. here is a direct link to where you scan your pc for free:

trend micro corp. are EXTREAMLY ' TRUSTWORTHY ' they are leading anti-virus online team. so if any program pop-ups ask you anything granting them access. let them. here is the Trend Micro online scan link. http://housecall.antivirus.com/housecall/start_corp.asp just select your Country and click ok. it will connect you to them and let you begin the scan.

5. last step into completing our tour of this dreadful virus. lets get a patch to stop us getting it ever again shall we.. ill give you a link and you can find out what you need for your xp pc or likewise other OS. here are "some" links i used:

http://www.ntlworld.com/help/services/wormvirus.html
http://www.microsoft.com/technet/treevi ... 03-026.asp

the rest is easy. you download the applet patch and it will keep you safe from W32.Blaster.Worm
you may need a good "FREE" firewall. like me. get one here at http://www.zonealarm.com go to downloads and find the Free version. (there is one, and its great)

if you have trouble finding the download link i have devised one here. you may find this one does not work with your pc. this is a XP version download. i dont know whether its PROF or HOME. you find out.

http://www.microsoft.com/downloads/deta ... laylang=en

i hope your pc gets well soon. if you have further problems i have pasted some advice from elsewhere as extra help for you.

7. NTL's help:

"Windows XP users may also want to enable the inbuilt firewall option. Please follow these steps to enable the XP Internet Connection Firewall:

Click Start
Click Control Panel
If the heading "Pick a Category" appears, then choose the "Switch to classic view" option on the left-hand-side
Next double-click Network Connections - this should give you a list of all network and internet connections on your computer, one of which will be your cable modem connection.
Click the right-mouse-button on the connection used for your cable modem, and choose Properties
Select the Advanced tab
Select the option to "protect my computer and network"
Click OK "

8. People with windows 2000. NTL's help:

"In order to prevent your machine from repeatedly rebooting and you are running the Windows 2000 operating system, please carry out the following:

How to Configure TCP/IP Security:

Click Start, point to Settings, click Control Panel, and then double-click Network and Dial-up Connections.
Right-click the interface on which you want to configure inbound access control, and then click Properties.
In the Components checked are used by this connection box, click Internet Protocol (TCP/IP), and then click Properties.
In the Internet Protocol (TCP/IP) Properties dialog box, click Advanced. Click the Options tab.
Click TCP/IP filtering, and then click Properties.
Select the Enable TCP/IP Filtering (All adapters) check box. When you select this check box, you enable filtering for all adapters, but you configure the filters on a per-adapter basis. The same filters do not apply to all adapters.

There are three columns with the following labels:
TCP Ports
UDP Ports
IP Protocols

In each column, you must select either of the following options:

Permit All. If you want to permit all packets for TCP or UDP traffic, leave Permit All activated.
Permit Only. If you want to allow only selected TCP or UDP traffic, click Permit Only, click Add, and then type the appropriate port in the Add Filter dialog box.
If you want to block all UDP or TCP traffic, click Permit Only, but do not add any port numbers in the UDP Ports or TCP Port column. You cannot block UDP or TCP traffic by selecting Permit Only for IP Protocols and excluding IP protocols 6 and 17. "


************************************************** ********************************
************************************************** ********************************


please contact jonofeist@hotmail.com if you have any problems. this is all i can think of right now.
John de Faye http://www.COVERTCLAN.com


John de Faye
UK | offers his appologies to the effected people and this ****ing virus. ('-') M16: