Forum Home
Press F1
 
Thread ID: 38156 2003-09-29 06:12:00 Following a re-install - the safest way to get updates Fishb8 (484) Press F1
Post ID Timestamp Content User
178837 2003-09-29 06:12:00 Just done a re-install on a PC I bought recently with a dodgy version of XP Pro, using my own, legit, disc and product #.
When I completed the install + SP1 from PC World, I went onto the net for MS critical updates and AV updates but got the Blaster virus before it all could be installed. Took me a while to discover I had Blaster as my dial-up was so slow. Saw more traffic on the way out than in.
So, how do you protect yourself at this very vulnerable stage?
Fishb8 (484)
178838 2003-09-29 06:27:00 preparation is the main way. Should have got the patch first. Failing that get on another pc and get the patch. Also you note that the internet traffic had more going out than in...doesn't sound like blaster.
Go ctrl+alt+del, check for msblast.exe as a process. If you can't see it check for dllhost.dll, if that is found its probably the welchia worm which causes a lot of traffic...another patch from microsoft is needed and the tool from symantec.
kewefella (2092)
178839 2003-09-29 06:32:00 If you had the Win XP firewall enabled (and I thought it was by default?) you *should* have been fine .

In any case I would suggest that one of your first installations (after the Blaster patch) be a dedicated firewall for protection . My personal choice is Kerio (free version) but there are others available .

If you need more information on installing the Blaster patch have a look at this thread ( . pcworld . co . nz/thread . jsp?forum=1&thread=38744" target="_blank">pressf1 . pcworld . co . nz) .
Susan B (19)
178840 2003-09-29 06:38:00 Yeah, who goes online without a firewall after just installing XP!! googness knows how many MS apps are trying to connect to the MS server, plus you are very unprotected. PoWa (203)
178841 2003-09-29 06:41:00 *goodness

Oh and I don't think the XP firewall is turned on by default after a fresh install. Thats why they implemented it turned on by default in Server 2003. Correct me if I'm wrong. ;)
PoWa (203)
178842 2003-09-29 09:45:00 I must confess that I did a google on error messages I got and saw a "patch". I downloaded the patch and got myself WORM_NACHI.A as a swap for Blaster. This was the item that was hogging my bandwidth.

What I am really after is:- What services must be disabled to prevent incursions through legitimate MS hole? I know it's something to do with RPC. I could be wrong, but there are certain methods of shutting out intrusions through doors that are left open by XP.
BTW, Susan, my windows firewall, as already mentioned, is not enabled by default. Only the most very recent versions are embedded as in service.
I have been happily using XP Pro for nearly 2 years, without any problems, until this episode.
Susan - I remember you stole my fish!
Fishb8 (484)
178843 2003-09-29 10:00:00 Get free antivirus like AVG, use a free respectful firewall like zonelabs and u should be sweet.

BTW I haven't got any XP updates and have no problems yet (since @ least July). I back up and if I get problems (usually because of software not virus' or hackers') I then just fresh install. Its quicker/easier than most options.

What do ppl think about that?
Scotty D (491)
178844 2003-09-29 11:26:00 >What I am really after is:- What services must be disabled to prevent incursions through legitimate MS hole?

none . there is one that can help but it dosn't last for long . easest way is to simply install firewall then update .

>BTW I haven't got any XP updates . . . . What do ppl think about that?

yeah yeah heard it all before . everyone i know whos ever said that has changed their tune the day their pc got infected .
tweak'e (174)
178845 2003-09-29 18:38:00 > BTW, Susan, my windows firewall, as already mentioned, is not enabled by default . Only the most very recent versions are embedded as in service .

Thanks for that info, I must remember it . :-)


> Susan - I remember you stole my fish!

Uh oh . . . . . :8}

I thought you said I could borrow it . :O Do you want it back now? :p :D
Susan B (19)
178846 2003-09-29 19:52:00 I always install a firewall and anti virus before connecting a new puter to the net . The first update is the anti virus THEN windows update .

I have an installation disk containing these programs and a few of the basic updates and security patches . If you can save any and all updates and place them on CD every chance you get, then if you have to reformat it is a hell of a lot quicker to start again .
dipstick01 (445)
1 2