Another hic up

[princesswarrior]

As you no I have had to flatten my hard drive.

I have put firewall on and all that crap, but now the computer is telling me i have a worm called WORM/LOVSAN.A. I ran the virus software and it said it had cleaned it. Nothing has changed on the pc and seems tyo be running ok. Does anyone know about this worm and what it does and how to get rid of it as it seems to keep coming back.

Thank you

Pw x

[Myk]

The worm name has been derived from the text hidden in the code of this worm:

I just want to say LOVE YOU SAN!!
billy gates why do you make this possible ? Stop making money and fix your software!!


----------------------------------------


It's actually the very same worm (M$Blast) that everyone had last week, its odd that its got passed you firewall (make sure the firewall has port 135 closed and is upto date).

You also need to install the security patch from Microsoft and then you should be laughing.

The whole solution to this worm is described fully in the chillout room notes (top of page) but for your convenience I'll copy and paste the solution here

------------------------------------------

originally posted by MykUPDATE :
For those who havent got their head round this yet or simply don't have access to a good AV/Firewall software, I have uploaded all you need to get rid of the worm to :

1)http://www.euro-computers.com/soft/...980-x86-ENU.exe

and

2)http://www.euro-computers.com/soft/Blast_Clean.zip


---------------------------------------------------

Instructions :

Download and both 1 and 2. Double click and install number 1 and restart PC. Now unzip number 2 to any folder you like but make sure all 3 files are kept together in the same folder. Now double click on sysclean.com and wait while it searches and cleans all your files. When finished restart. You are now worm-free !

[princesswarrior]

the patch was downloaded this afternoon, straight after it had been flatttened. Thanks babes i will check the firewall.

I will shout if i need ya hun.

Pw x

[Myk]

Problem is hun, you have got the worm on there prior to applying the patch (more than likely during the download) so now although with the patch you have blocked a new entry (phnar phnarrr) you need to get rid of the worm you have. To do this use the blast clean app I linked on the previous post (link nº2) and then youll be fine and dandy. See the patch really needed installing BEFORE you connected to the net. Still its nothing serious just run the blast clean app as I said and all sorted

[princesswarrior]

Myk
I downloaded the blast clean up, opened it and scanned computer, once it had finished i viewed report and all it's saying is error occured while scanning file's. HELP ohhhhhhhhhh i am crap when i have to do out like this.
Ta hun
Pw x

[Myk]

The error is "normal" and its only saying an error occured while scanning "certain" files, these files are the ones windows was using at the time of the scan. U should really be fine now hun, coz any infected files it found during the scan have been cleaned now

Myk.

[princesswarrior]

Thank you x

Pw x

[fugjostle]

go to http://grc.com/default.htm and click on the "shields up" link. This will perform a quick security audit of your system from the Internet and report on any issues it has found.