Solution for the VIRUS Warning - WTC Survivor

[Guest guest]

Dear Members of Samratchana Family,

 

Shankaram Shiva Shankaram

 

I am forwarding to you all the solution for the Virus.

 

Thanks

Krish

 

PLEASE DO NOT REPLY THIS MAIL

 

 

W32.Blaster.Worm is a worm that will exploit the DCOM RPC vulnerability

(described in Microsoft Security Bulletin MS03-026) using TCP port 135.

This worm will attempt to download and run the Msblast.exe file.

 

Block access to TCP port 4444 at the firewall level, and then block the

following ports, if they do not use the applications listed:

 

TCP Port 135, " DCOM RPC "

UDP Port 69, " TFTP "

 

Please update the Latest virus DAT files on your PC immediatley

using instructions below. Also check if it is updated to the version

4.0.4284.

 

1. Dowload the file setup.exe from the URL

ftp://10.1.1.15/outgoing/sdat/setup.exe .

2. Execute setup.exe

3. Restart the system

 

Incase you are infected. Please follow the removal instructions.

 

1. Download the FixBlast.exe file from:

 

    ftp://10.1.1.15/outgoing/sdat/fixblast.exe

 

2. Save the file to a convenient location, such as your downloads folder

or the Windows Desktop (or removable media that is known to be uninfected,

if possible).

3. To check the authenticity of the digital signature, refer to the

section, " Digital signature. "

4. Close all the running programs before running the tool.

5. If you are running Windows XP, then disable System Restore. Refer to

the section, " System Restore option in Windows Me/XP, " for additional

details.

 

CAUTION: If you are running Windows XP, we strongly recommend that you do

not skip this step. The removal procedure may be unsuccessful if Windows

XP System Restore is not disabled, because Windows prevents outside

programs from modifying System Restore.

 

 

 

Double-click the FixBlast.exe file to start the removal tool.

Click Start to begin the process, and then allow the tool to run.

 

 

NOTE: If, when running the tool, you see a message that the tool was not

able to remove one or more files, run the tool in Safe mode. Shut down the

computer, turn off the power, and wait 30 seconds. Restart the computer in

Safe mode and run the tool again. All the Windows 32-bit operating systems,

except Windows NT, can be restarted in Safe mode. For instructions, read

the document " How to start the computer in Safe Mode. "

 

 

Restart the computer.

Run the removal tool again to ensure that the system is clean.

If you are running Windows XP, then re-enable System Restore.

Run LiveUpdate to make sure that you are using the most current virus

definitionsyou recieve it. Please update  your latest mcafee

 

 

 

 

 

 

Placed At :

 

 

kalambur srinivasan <kalamburs on 08/12/2003 06:30:07 PM

 

Please respond to

 

cc:

 

Fwd: Fw: VERY IMPORTANT!!!!!!! VIRUS Warning -

WTC Survivor

 

 

 

Note: forwarded message attached.