• Register
  • Help
Page 1 of 3 123 LastLast
Results 1 to 10 of 22

Topic: VERY IMPORTANT!! Speed Worm!!!

Share/Bookmark
  1. #1

    VERY IMPORTANT!! Speed Worm!!!

    I have been downloading at the speed of 72.8 kbps for the past 2 days. I have high speed and download at 1200-1800 kpbs.
    Someting was wrong. Tech support was no help.

    My wife gets a call from the UK at her office. There is a worm out there that is attacking our speeds. All over the globe.

    I found the fix and now I am at 1300kpbs.

    http://www.broadbandreports.com/shownews/31290

    The above link will explain it all.

    Yes, I know this is not about samples but Im watching out for my NS buds [img]images/icons/smile.gif[/img]

  2. #2

    Re: VERY IMPORTANT!! Speed Worm!!!

    My computer faced the monster yesterday. I found this somewhere in the Web;

    -----------

    Detection.

    The worm is very easily detected by users.

    Pressing control-alt-delete, then clicking on \"Task Manager\" and selecting the \"Processes\" tab will bring up a list of processes running on the machine. Clicking on \"Image Name\" will sort the processes alphabetically. If there is a process named \"msblast.exe\" running on the system, then it has been infected by the worm.


    Clean up.

    The worm is relatively easy to clean up after detection.

    Step one is to patch the infected system against the vulnerability that allowed the worm to \"get in\" in the first place. This process requires the user of the computer to have administrator level access to the system.

    Once the user is logged in again with administrator rights, what they need to do is load up Internet Explorer, and direct the browser to windowsupdate.microsoft.com. The user will be prompted by some pop up windows, directed through a fairly easy to understand and intuitive process.

    The next step is to reboot the system.

    After the system has rebooted it will be necessary to delete the worm\'s executable file, msblast.exe. However, its process must be stopped before it can be deleted.

    Once the user logs back in with administrator rights, they should load up the \"Task manager\" again as described above. Click on the \"Image Name\" field under the \"Processes\" tab and click once on the \"msblast.exe\" process. Press \"End Process\" to stop it from running.

    The worm\'s executable file will be found in the system32 directory, which is a subdirectory of (by default) the \"winnt\" directory in Windows 2000 machines, and the \"windows\" directory in Windows XP installations.

    Use Windows Explorer to navigate to the system32 directory, locate the mblast.exe file and delete it. Reboot your system. Done!

    The final step, removing the registry key created by the worm, is optional. It isn\'t really that important -- the key simply causes the worm to start every time the system is re-booted, but once the worm file itself is deleted it\'s redundant anyway.

    This is done manually by using the registry editor. It is important to note that making incorrect changes to the registry can have catastrophic consequences.

    Load the registry editor by clicking on the start button, navigating to \"Run...\" and typing in \"regedit\". Run regedit and navigate to the following \"key\".

    HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\ CurrentVersion\\Run

    In the right hand section of the registry editor, the following value will be found:

    \"windows auto update\"=\"msblast.exe\"

    Delete it.

    Reboot. Done!
    ------------

    SergeD

  3. #3

    Re: VERY IMPORTANT!! Speed Worm!!!

    Frank,

    Yes, I spent the evening last night cleaning it out of a friend\'s computer and bringing it up to date. Fortunately our computers at work are protected by a firewall, as are mine at home.

    -- Martin

  4. #4

    Re: VERY IMPORTANT!! Speed Worm!!!

    Yes, it\'s is gone now. My dl was just clocked at 1622k [img]images/icons/smile.gif[/img]

    Dam porn sites [img]images/icons/smile.gif[/img] hehehehehe

  5. #5

    Re: VERY IMPORTANT!! Speed Worm!!!

    My cousin got hit by the W32.Blaster.Worm. Odd thing is, how come Norton didn\'t catch it?? It\'s on my list of known viruses.

    Norton tip: make sure your Bloodhound settings are set to HIGH. Actually setting it to medium WILL let a few viruses through, I\'ve experienced this firsthand.

  6. #6

    Re: VERY IMPORTANT!! Speed Worm!!!

    I don\'t get. The thing is gone! (I think so anyway) now, I am at 110kpbs. Then 72.8 again!

    I was at 1800kbps an hour ago

  7. #7

    Re: VERY IMPORTANT!! Speed Worm!!!

    Pressing control-alt-delete, then clicking on \"Task Manager\" and selecting the \"Processes\" tab will bring up a list of processes running on the machine. Clicking on \"Image Name\" will sort the processes alphabetically. If there is a process named \"msblast.exe\" running on the system, then it has been infected by the worm.


    *not found on all 3 pc\'s????

  8. #8

  9. #9

    Re: VERY IMPORTANT!! Speed Worm!!!

    Do I understand correctly? Is this the cause of my sloooooow dl speeds right now? DWay reports no problems.

  10. #10

    Re: VERY IMPORTANT!! Speed Worm!!!

    I\'ve been caught 3 times with virus in 2 days. The passage is a port other than the number 80, I don\'t remember which one. So a firewall seems possibly a good way to avoid the trap. Also on www.microsoft/security I\'ve read they have a patch for it.

    SergeD

Go Back to forum

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •