Post by yummy on Jul 22, 2004 10:32:00 GMT -5
Q. I received an e-mail message about the Blaster worm that contains a file attachment. It claims to be from Microsoft. Is it?
A.
No, it is a hoax. Microsoft never distributes software in e-mail and never instructs customers to download files directly from an e-mail message. E-mail from Microsoft will always direct you to a Web page where you can download updates. If you receive a message purporting to be from Microsoft that contains an executable file (for example a file ending in .exe, .com, .bat, .scr, .js, .vbs, .cmd), delete the message immediately. Do not open any attachments and do not download any executable files directly from the e-mail message.
For more information about how Microsoft delivers updates, see this page:
•
Microsoft Policies on Software Distribution
Q. I've heard about a new worm that delivers the security update needed to help protect against Blaster. Is it harmful?
A.
A new worm began circulating August 18, 2003, that reportedly infects computers, disables the Blaster worm if it is present, and downloads and attempts to install the security update addressed by Microsoft Bulletin MS03-026. While this worm may not appear to be malicious, it may install the update incorrectly, leaving you susceptible to attack.
•
Read the PSS Security Response Team Alert—New Worm: Nachi, Blaster-D, Welchia
Q. Which operating systems are vulnerable?
A.
The following products could be affected by this worm:
•
Microsoft® Windows NT® 4.0
•
Microsoft Windows® 2000
•
Microsoft Windows XP
•
Microsoft Windows Server™ 2003
Other versions of Windows are not affected. If you are running Microsoft Windows 95, Windows 98, Windows 98 Second Edition (SE), or Windows Millennium (Windows Me), you do not need a Windows security update for this issue.
Q. How can I tell if the worm is affecting my computer?
A.
Some customers whose computers have been infected may not notice the presence of the worm at all, while others who are not infected may experience problems because the worm is attempting to attack their computer. Typical symptoms may include Windows XP and Windows Server 2003 systems rebooting every few minutes without user input, or Windows NT 4.0 and Windows 2000 systems becoming unresponsive. Whether you are experiencing these symptoms or not, Microsoft recommends that you take the following action immediately:
•
If you're running Windows Server 2003 or Windows NT 4.0, follow Steps 1–3 for home users on this page.
•
If you're running Windows XP or Windows 2000, follow all Steps 1–4 for home users on this page.
Q. I am running Windows 95, Windows 98, Windows 98 Second Edition (SE), or Windows Millennium (Me). Do I need to get an update?
A.
No. But this is a great time to help protect your computer from other viruses and worms. To find out how to do so please click the link below:
•
Take 3 steps to help Protect Your PC in the future
Q. How can I tell which version of Windows I am running?
A.
To determine which version of Microsoft Windows you are running:
1.
On the taskbar at the bottom of your screen, click Start, and then click Run.
2.
In the Run dialog box, type winver.
3.
Click OK.
A dialog box displays the version that you are running.
Q. How can I tell if my computer is infected?
A.
Typical symptoms may include Windows XP and Windows Server 2003 computers rebooting every few minutes without user input, or Windows NT 4.0 and Windows 2000 computers becoming unresponsive. You may not notice the presence of the worm infection at all on your computer and so you should run updated antivirus software. If you already have antivirus software installed, go to your antivirus vendor's website to get the latest updates, also known as virus definitions.
If you do not have antivirus software installed, get it. The following vendors participating in the Microsoft Virus Information Alliance (VIA) offer antivirus products for home users:
•
Network Associates
•
Trend Micro
•
Symantec
•
Computer Associates
Q. What should I do if my computer is infected with Blaster or a variant?
A.
The basic steps to repair your computer are:
1.
Enable a firewall.
2.
Update Windows.
3.
Run antivirus software.
4.
Remove the worm.
Follow the instructions on the following page:
•
What You Should Know About the Blaster Worm and Its Variants
To get the Blaster Worm Removal Tool for Windows 2000 and Windows XP, either:
•
Visit Windows Update and install critical update KB833330 if it is listed as available
•
Download the tool directly from the Microsoft Download Center and install it
Q. My computer is infected and there is no virus definition available for my antivirus software. What should I do?
A.
Antivirus vendors are continually updating their virus definitions. If there is no virus definition available yet for your software, enable a firewall and update your Windows software as described in What You Should Know About the Blaster Worm and Its Variants. Then check your antivirus vendor's website for an update.
Q. How do I enable Internet Connection Firewall (ICF) on Windows XP?
A.
1.
On the taskbar at the bottom of your screen, click Start, and then click Control Panel.
2.
Click the Network and Internet Connections category.
(If the Network and Internet Connections is not visible, click Switch to Category View under Control Panel on the left side of the Control Panel window.)
3.
Click Network Connections.
4.
Right-click the Dial-up, LAN, or High-Speed Internet connection that you use to connect to the Internet, and then click Properties from the context menu.
5.
On the Advanced tab, under Internet Connection Firewall, select Protect my computer and network, and then click OK. The Windows XP firewall is now enabled.
Q. How can I verify that I already have the update?
A.
If the update is installed, it will display in the list of currently installed programs on your computer. To check that list:
1.
On the taskbar at the bottom of your screen, click Start, and then click Control Panel.
2.
Open Add or Remove Programs.
3.
In the list of currently installed programs, look for a Windows entry that contains 824146.
If that entry is present, the update is installed. If that entry is not present, you should follow the instructions to install the update that are listed on this page:
•
What You Should Know About the Blaster Worm and Its Variants
Q. Does Windows Automatic Update automatically install updates?
A.
Not by default. Windows Automatic Update will download updates and prompt you to install them. To install updates that have been downloaded:
1.
When you are notified that new updates are ready to be installed, click the icon that appears in the notification area.
2.
Click Install in the Automatic Updates dialog box.
Windows notifies you when installation is complete. If you are prompted to restart your computer, do so immediately.
A.
No, it is a hoax. Microsoft never distributes software in e-mail and never instructs customers to download files directly from an e-mail message. E-mail from Microsoft will always direct you to a Web page where you can download updates. If you receive a message purporting to be from Microsoft that contains an executable file (for example a file ending in .exe, .com, .bat, .scr, .js, .vbs, .cmd), delete the message immediately. Do not open any attachments and do not download any executable files directly from the e-mail message.
For more information about how Microsoft delivers updates, see this page:
•
Microsoft Policies on Software Distribution
Q. I've heard about a new worm that delivers the security update needed to help protect against Blaster. Is it harmful?
A.
A new worm began circulating August 18, 2003, that reportedly infects computers, disables the Blaster worm if it is present, and downloads and attempts to install the security update addressed by Microsoft Bulletin MS03-026. While this worm may not appear to be malicious, it may install the update incorrectly, leaving you susceptible to attack.
•
Read the PSS Security Response Team Alert—New Worm: Nachi, Blaster-D, Welchia
Q. Which operating systems are vulnerable?
A.
The following products could be affected by this worm:
•
Microsoft® Windows NT® 4.0
•
Microsoft Windows® 2000
•
Microsoft Windows XP
•
Microsoft Windows Server™ 2003
Other versions of Windows are not affected. If you are running Microsoft Windows 95, Windows 98, Windows 98 Second Edition (SE), or Windows Millennium (Windows Me), you do not need a Windows security update for this issue.
Q. How can I tell if the worm is affecting my computer?
A.
Some customers whose computers have been infected may not notice the presence of the worm at all, while others who are not infected may experience problems because the worm is attempting to attack their computer. Typical symptoms may include Windows XP and Windows Server 2003 systems rebooting every few minutes without user input, or Windows NT 4.0 and Windows 2000 systems becoming unresponsive. Whether you are experiencing these symptoms or not, Microsoft recommends that you take the following action immediately:
•
If you're running Windows Server 2003 or Windows NT 4.0, follow Steps 1–3 for home users on this page.
•
If you're running Windows XP or Windows 2000, follow all Steps 1–4 for home users on this page.
Q. I am running Windows 95, Windows 98, Windows 98 Second Edition (SE), or Windows Millennium (Me). Do I need to get an update?
A.
No. But this is a great time to help protect your computer from other viruses and worms. To find out how to do so please click the link below:
•
Take 3 steps to help Protect Your PC in the future
Q. How can I tell which version of Windows I am running?
A.
To determine which version of Microsoft Windows you are running:
1.
On the taskbar at the bottom of your screen, click Start, and then click Run.
2.
In the Run dialog box, type winver.
3.
Click OK.
A dialog box displays the version that you are running.
Q. How can I tell if my computer is infected?
A.
Typical symptoms may include Windows XP and Windows Server 2003 computers rebooting every few minutes without user input, or Windows NT 4.0 and Windows 2000 computers becoming unresponsive. You may not notice the presence of the worm infection at all on your computer and so you should run updated antivirus software. If you already have antivirus software installed, go to your antivirus vendor's website to get the latest updates, also known as virus definitions.
If you do not have antivirus software installed, get it. The following vendors participating in the Microsoft Virus Information Alliance (VIA) offer antivirus products for home users:
•
Network Associates
•
Trend Micro
•
Symantec
•
Computer Associates
Q. What should I do if my computer is infected with Blaster or a variant?
A.
The basic steps to repair your computer are:
1.
Enable a firewall.
2.
Update Windows.
3.
Run antivirus software.
4.
Remove the worm.
Follow the instructions on the following page:
•
What You Should Know About the Blaster Worm and Its Variants
To get the Blaster Worm Removal Tool for Windows 2000 and Windows XP, either:
•
Visit Windows Update and install critical update KB833330 if it is listed as available
•
Download the tool directly from the Microsoft Download Center and install it
Q. My computer is infected and there is no virus definition available for my antivirus software. What should I do?
A.
Antivirus vendors are continually updating their virus definitions. If there is no virus definition available yet for your software, enable a firewall and update your Windows software as described in What You Should Know About the Blaster Worm and Its Variants. Then check your antivirus vendor's website for an update.
Q. How do I enable Internet Connection Firewall (ICF) on Windows XP?
A.
1.
On the taskbar at the bottom of your screen, click Start, and then click Control Panel.
2.
Click the Network and Internet Connections category.
(If the Network and Internet Connections is not visible, click Switch to Category View under Control Panel on the left side of the Control Panel window.)
3.
Click Network Connections.
4.
Right-click the Dial-up, LAN, or High-Speed Internet connection that you use to connect to the Internet, and then click Properties from the context menu.
5.
On the Advanced tab, under Internet Connection Firewall, select Protect my computer and network, and then click OK. The Windows XP firewall is now enabled.
Q. How can I verify that I already have the update?
A.
If the update is installed, it will display in the list of currently installed programs on your computer. To check that list:
1.
On the taskbar at the bottom of your screen, click Start, and then click Control Panel.
2.
Open Add or Remove Programs.
3.
In the list of currently installed programs, look for a Windows entry that contains 824146.
If that entry is present, the update is installed. If that entry is not present, you should follow the instructions to install the update that are listed on this page:
•
What You Should Know About the Blaster Worm and Its Variants
Q. Does Windows Automatic Update automatically install updates?
A.
Not by default. Windows Automatic Update will download updates and prompt you to install them. To install updates that have been downloaded:
1.
When you are notified that new updates are ready to be installed, click the icon that appears in the notification area.
2.
Click Install in the Automatic Updates dialog box.
Windows notifies you when installation is complete. If you are prompted to restart your computer, do so immediately.