----- Original Message -----
From: "Anne Neighbors" <[log in to unmask]>


> Can someone please tell me which files to access to see if the blaster virus
is in my
> software?  Do I open My Documents and check my files?
>
There is Msblast.exe somewhere in system. How to find it
Look to if registry key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
is  "windows auto update"="msblast.exe"

More information from
http://www.sarc.com/avcenter/venc/data/w32.blaster.worm.html

You can download removal tool from

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html



> Also, my Norton anti-virus is current as of August 11, 2003 and does not
indicate an update
> is needed.  It would have been helpful if Norton had posted a notice stating
they had installed
> the patch for customers.
>
From http://www.sarc.com/avcenter/venc/data/w32.blaster.worm.html

NOTE: This threat will be detected by virus definitions having:
Defs Version: 50811s
Sequence Number: 24254
Extended Version: 8/11/2003, rev. 19

so propably Your NA detects this virus, but there is already new version
what NA not detects.  Install Windows patch and personal firewall.

Access to patch from
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp
because windowsupdate seems to be already almost unusable. DoS attack to
windowsupdate
is on features this worm.


Toomas

             Do you want to signoff PCSOFT or just change to
                    Digest mode - visit our web site:
                   http://freepctech.com/pcsoft.shtml