Just got this email from my broad band supplier..
Dear customer,
Important information for all Internet users
You may have read recently that a computer virus known as MSBlast or Lovsan is affecting computers with Microsoft Windows Operating systems. This virus utilises vulnerability in the Microsoft software. Its effect is to cause computers to restart regularly. MSBlast is a type of virus known as a "worm" which does not appear to cause permanent damage but is a threat to be taken seriously.
We are committed to providing you with the best service we can and so, although this virus does not relate to our service, we would like to offer you advice on how to protect your computer or how to remove the vulnerability, if you have been affected.
Which computer operating systems are affected?
Users of the following operating systems could be affected: Windows XP, Windows 2000, Windows 2003, Windows NT 4.0.
Customers using Windows 95, Windows 98 or Windows ME are not affected.
What is the name of the virus?
Microsoft refers to this virus as the "W32.Blaster.Worm", but it is also known as W32/Lovsan.worm, WORM_MSBLAST.A, Win32.Posa.Worm.
How do you I avoid getting the virus?
Firstly, you should ensure that you install a Firewall application and anti virus software on your computer. A Firewall prevents unauthorised access to your computer and will prevent attack from viruses. Anti-virus software will protect you from viruses as long as you keep it up to date with the latest updates. Microsoft XP comes equipped with a Firewall - or you can download and install a free Firewall from www.zonealarm.com.
Users of the operating systems listed above, in the section 'Which computer operating systems are affected?' should enhance their software with the latest update called a "patch". The patch that will address this issue is called MS03-026. Updating your computer with this patch will remove the vulnerability and prevent this type of virus affecting you.
Customers that have previously applied the security patch MS03-026 before today are protected and no further action is required.
How do you know if your computer has the virus?
The most common symptom of the virus is that your computer will restart every few minutes, without your input. You may also find that a file called msblast.exe has been created in your computer's WINDOWS SYSTEM32 directory.
How do you know if you have the virus?
To detect this virus, search for msblast.exe in the WINDOWS SYSTEM32 directory or download the latest anti-virus software signature from your anti-virus vendor and scan your machine.
A number of software vendors are working together to overcome this virus. Additional information on this virus is available from any of the following links:
Network Associates: us.mcafee.com
Trend Micro: trendmicro.com
Symantec: securityresponse.symantec.com
Computer Associates: www3.ca.com
Microsoft's Virus Information Alliance: microsoft.com
If you get the Virus how do you remove it?
1. In order to remove this virus please follow these instructions:
Do a search for msblast.exe by using the find files or programmes command (usually found in system32 folder) Delete it. Click Start and select Run Type msconfig & click OK Select the start-up tab Disable msblast Reboot machine and enable your Firewall or anti-virus software. Refer to your software instructions provided to ensure that it is set up correctly.
Alternatively Security specialists Symantec have released a tool which will remove the current infection from your computer. To download this tool, go to www.symantec.com and go to the security response section. Then click the W32.Blaster.Worm link in the latest virus threats section. This page offers more information regarding the worm, and a downloadable tool to remove it.
2. Once you have removed the virus, immediately select one of the links below to install the security patch needed to ensure no repeat infection occurs.
securityresponse.symantec.com
microsoft.com
If you are away from your machine or are unable to get on-line, then the above links will provide patches which are small enough to download from another PC on to a floppy disc, to install on your PC at a later date.
Yours sincerely,
Customer Service Team |