Top Marks to NTL

Crypto · 15-08-2003, 17:13

Nice one CS.

Just received an email from CS about the MSBlast virus and how to deal with it.

NTL have got it right this time and deserve a bit of praise for getting something right for once.

Thankyou

Crypto

grum1978 · 15-08-2003, 17:16

Is that a general mail to everyone or one you recieved in responce to one you sent?

Crypto · 15-08-2003, 17:19

Nothing special about me I'm afraid.

I have Win 98 so am not affected anyway. I know a couple of blokes at work who are and I'll be copying NTL's advice to them.

Crypto

Sensei Katana · 15-08-2003, 19:51

I've just got this mail as well.

Nice one NTL! Most other people wouldn't have bothered with sending a mail.

Cheers!

Quote:

Dear customer,

Important information for all Internet users

You may have read recently that a computer virus known as MSBlast or Lovsan is affecting computers with Microsoft Windows Operating systems. This virus utilises vulnerability in the Microsoft software. Its effect is to cause computers to restart regularly. MSBlast is a type of virus known as a "worm" which does not appear to cause permanent damage but is a threat to be taken seriously.

At ntl home we are committed to providing you with the best service we can and so, although this virus does not relate to our service, we would like to offer you advice on how to protect your computer or how to remove the vulnerability, if you have been affected.

Which computer operating systems are affected?

Users of the following operating systems could be affected: Windows XP, Windows 2000, Windows 2003, Windows NT 4.0.

Customers using Windows 95, Windows 98 or Windows ME are not affected.

What is the name of the virus?

Microsoft refers to this virus as the "W32.Blaster.Worm", but it is also known as W32/Lovsan.worm, WORM_MSBLAST.A, Win32.Posa.Worm.

How do you I avoid getting the virus?

Firstly, you should ensure that you install a Firewall application and anti virus software on your computer. A Firewall prevents unauthorised access to your computer and will prevent attack from viruses. Anti-virus software will protect you from viruses as long as you keep it up to date with the latest updates. Microsoft XP comes equipped with a Firewall - or you can download and install a free Firewall from www.zonealarm.com.

Users of the operating systems listed above, in the section 'Which computer operating systems are affected?' should enhance their software with the latest update called a "patch". The patch that will address this issue is called MS03-026. Updating your computer with this patch will remove the vulnerability and prevent this type of virus affecting you.

Customers that have previously applied the security patch MS03-026 before today are protected and no further action is required.

How do you know if your computer has the virus?

The most common symptom of the virus is that your computer will restart every few minutes, without your input. You may also find that a file called msblast.exe has been created in your computer's WINDOWS SYSTEM32 directory.

How do you know if you have the virus?

To detect this virus, search for msblast.exe in the WINDOWS SYSTEM32 directory or download the latest anti-virus software signature from your anti-virus vendor and scan your machine.

A number of software vendors are working together to overcome this virus. Additional information on this virus is available from any of the following links:

Network Associates:
http://us.mcafee.com/virusInfo/defau...virus_k=100547

Trend Micro:
http://www.trendmicro.com/vinfo/viru...WORM_MSBLAST.A

Symantec:
http://securityresponse.symantec.com...ster.worm.html

Computer Associates:
http://www3.ca.com/virusinfo/virus.aspx?ID=36265

Microsoft's Virus Information Alliance: http://www.microsoft.com/technet/security/virus/via.asp

If you get the Virus how do you remove it?

1. In order to remove this virus please follow these instructions:

Do a search for msblast.exe by using the find files or programmes command (usually found in system32 folder)
Delete it.
Click Start and select Run
Type msconfig & click OK
Select the start-up tab
Disable msblast
Reboot machine and enable your Firewall or anti-virus software. Refer to your software instructions provided to ensure that it is set up correctly.

Alternatively

Security specialists Symantec have released a tool which will remove the current infection from your computer. To download this tool, go to www.symantec.com and go to the security response section. Then click the W32.Blaster.Worm link in the latest virus threats section. This page offers more information regarding the worm, and a downloadable tool to remove it.

2. Once you have removed the virus, immediately select one of the links below to install the security patch needed to ensure no repeat infection occurs.

http://securityresponse.symantec.com...ster.worm.html

http://microsoft.com/technet/treevie...n/MS03-026.asp

If you are away from your machine or are unable to get on-line, then the above links will provide patches which are small enough to download from another PC on to a floppy disc, to install on your PC at a later date.

For further information

Should you require additional assistance please reference ntl home Service Status Page or call our Service Status Line on 0800 052 4315 for the latest update on this issue.

Yours sincerely,

Customer Service Team
ntl:home

Mark W · 15-08-2003, 20:10

hmmm...try telling that to some of the customers who have been ranting at me today thats its all ntl's fault that they got the virus.....
because we didnt supply a firewall with our installation cd...

kronas · 15-08-2003, 20:16

Quote:

Originally posted by Mark W
hmmm...try telling that to some of the customers who have been ranting at me today thats its all ntl's fault that they got the virus.....
because we didnt supply a firewall with our installation cd...

i hate noobs just ignore them its there fault they dont adequatly secure there pc's trust me i have had to help quite a few with this virus

whats a firewall what is antvirus software etc

Ramrod · 15-08-2003, 20:23

Quote:

Originally posted by kronas
i hate noobs just ignore them its there fault they dont adequatly secure there pc's trust me i have had to help quite a few with this virus

Yup. I've been helping peeps with msblast, and thats not even my job

15-08-2003, 20:41

Quote:

Originally posted by Ramrod
Yup. I've been helping peeps with msblast, and thats not even my job

I cycled past a greengrocer's shop today - he had one sign up outside saying VIRUS - We can help! and another advertising cheap CD/R's. - You have to diversify

kronas · 15-08-2003, 20:46

Quote:

Originally posted by Ramrod
Yup. I've been helping peeps with msblast, and thats not even my job

and you think its my job

im not bothered really as im helping people......... earning some money on the side :p

Ramrod · 15-08-2003, 21:42

Quote:

Originally posted by kronas
and you think its my job

Nope, you don't have a job!

Quote:

im not bothered really as im helping people......... earning some money on the side :p

I did it for free

15-08-2003, 23:51

I got the same emaiil from ntl today warning me about the virus. I thought it was nice of them to tell us about it as a lot of companies wouldn't have bothered to

danielf · 16-08-2003, 00:09

I think we NTL should be applauded for sending out this email. I am watching my router logs, and two days after the news broke, I still get hit about twice a minute.

There must be so many unpatched people out there...