Any I.T Buffs?

[Marcos maniac]

I know that this is in the wrong forum, but hopefully will have more chance of being seen here.

P.C has picked up a virus

AVG found it this morning - not sure how it got through

Trouble is AVG cant quarintine/move it :banghaead:


I can find it manually, but cant get rid of it

Any suggestions???????

[dontlift]

Need to know what it is in order to advise, and yes your right you would be better putting this in the computers forum

[Marcos maniac]

dontlift said:

Need to know what it is in order to advise, and yes your right you would be better putting this in the computers forum

Ok AVG is telling me : Virus: Worm/Lovsan.A


Location: C:/WINDOWS/SYSTEM32/MSBLAST.EXE



>> Edited by Marcos maniac on Wednesday 3rd September 10:03

[duntonsr]

This should be your first port of call

www.microsoft.com/security/incident/blast.asp

[Haxo]

Go onto an AV site like symantec.com, get the lovesans remover, run it then follow the link to patch the hole in Windows that it used to get in the first place.

[danhay]

Instructions and fix here also:

http://vil.nai.com/vil/content/v_100547.htm

Dan

[docevi1]

easy,

goto start run, services.msc. Find the "Remote Call Procedure (RPC)" service, enter the properties. Then into Recovery tab. Change all the values to restart service rather than restart PC.
Then use mycomputer/explorer to goto c:windowssystem32 and delete msblast.exe.

Thats you virus free

But to it properly goto start, run, regedit. Navigate to the key

HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun and delete the entry relating to Msblast.exe, it's something to do with update windows or something.

Thats you completely virus free, but you need to ensure you don't get it again, so goto the above MS link and download the patch. This patch isn't the fix however it only helps to prevent the problem so you need a firewall as well.

What a firewall does is essentially close down any communicating ports between your computer and the interent, these ports can then be opened up selectively to allow programs to communicate. It is a very important piece of software that everyone should have (unless they have hardware firewalls). My personal favorite is Sygate Personal Firewall (SPF) from www.sygate.com, but some people prefer ZoneAlarm from www.zonelabs.com. There is also one called Outpost which is meant to be goood as well.

Hope you get it sorted.

[Marcos maniac]

Cheers Guys - all sorted now.

the power of P.H