[TrashMan]

I don't know how many of you know this (or if this is old news), but ther eis a new Blaster worm going around, causeing havoc...

I heard that PcCilin with the lates update can take care of it (alltough I can't get it to update...grrrrr..)

So I removed it manualy. Here's how:

1. In Task Manager terminate the process avserve2.exe (sometimes named saver.exe)
2. Delete all files with the same name in the Windowws folder
3. Turn off System Restore
4. Go in Run->regedit
5. find Hkey/Local Machine/Software/Microsoft/Windows/Current Version/Run/
6. Delete the avserve key
7. Install a firewall
8. Block the following ports:
TCP IP PORT 9996 & 445

Posibly even the FTP Port 5554....

[Nico]

Yeah, Sasser. quite a ***** too.

[Fury]

*sigh* When do people learn?

I haven't had any problems due to worms or viruses, why?

- I have either a software or hardware firewall.
- I have my operating systems up-to-date.
- I have my anti-virus up-to-date. (Although it never detects anything due to the first two statements.)

And, there is one big rule of thumb for firewalls. All ports should be closed and stealthed except the ones you need.

Even it would be enough if you have a firewall which blocks all incoming ports and allows all outgoing connections and ports and OS patched.

It can't be so hard, can it? *sigh*

[mikhael]

Educating the ignorant is always difficult, Fury.