Virus Update Information - WS32@mm Virus and Variations

Overview

Issue

How To

More Information


Issue

General information concerning the WS32 viruses

How To

Free Virus Scan Tool
If you think your system is infected; click here for a free online scan tool. (http://security.symantec.com/sscv6/default.asp?productid=symhome&langid=ie&venid=sym)

  • Program will ask if it can install, answer Yes
  • Program will scan your system for viruses and worms.

Patches

You should always install patches that support your Operating System, even if you are virus free. If you find an infection, you should install the patch first, and remove the virus. The best way to protect your self is to download and install patches to these operating systems. These patches are programs you download to your computer and then install them and the program fixes the problem.

  • Downloading the current patch(es),
  • Go to Microsoft download center (http://www.microsoft.com/downloads/search.aspx?displaylang=en&category=7)
  • Click on the patch you need
  • Save it to your desktop
  • Click on the icon (picture of the file) on your desktop
  • Run the program on your computer.
  • Repeat as needed to download all patches.

Aids for Infections

Some Internet customers who are infected with these viruses may experience slow Internet connection speeds or may not be able to access the Internet at all. If you are experiencing this problem,

DCOM RPC Connectivity / Disconnect Issue, (http://support.gci.net/kb/kb105) Print the article,or have a friend print it for you. Then follow the directions off line. These steps will let you connect to the Internet to start downloading patches.

Link to steps to detect and remove the Welchia Worm.

Link to steps to add security patch and removal tool for the Blaster Worm.

Link to general information concerning the Blaster Worm.

Over the past week, several different attacks have been launched against Microsoft Windows Operating Systems. So far all have been against the following operating systems:

  • Windows XP
  • Windows 2000
  • Windows NT

These attacks have been viruses and worms, which include:

  • W32.Sobig.F@mm
  • W32.Dumaru@mm
  • W32.Welchia.Worm
  • W32.Blaster.Worm
  • W32.Sowsat.J@mm
  • W32.Mantibe
  • W32.Nurok.1478
  • Backdoor.IRC.RPCBot
  • PWSteal.Navu
  • Backdoor Zebroxy

Infection /Virus checking

After downloading the patch(Es) you next need to check your system for infections

Go to one of these sites and use their free programs to check you computer.

  • Symantec (http://securityresponse.symantec.com/)
    • Go to removal tool section, find the tool for the item you are concern or,
    • Download and run them all
  • McAfee (http://vil.nai.com/vil/averttools.asp#stinger)
    • Go to Stand Alone removal tools, Read the list for your item of concern or
    • Download and run them all

Basic steps are:

  • Click on the Removal tool
  • A download window will pop up
  • Save the file to your desktop
  • Click on the icon (picture of the file) on your desktop
  • Run the program on your computer

Both of these sites provide detail information about the threat, and explain the terms and procedures.

More Information

This page was updated September 8, 2003