A puzzle

As part of the ongoing hassle of owning a PC I recently had the lovely
blaster virus on my PC. I purchased, downloaded and installed Norton
Internet Security 2004. It installed OK and got rid of the virus. NIS
then started to play up and wouldn't do Live Update.

I used the Norton on line virus check facility which detected the
blaster virus again. No remedial action taken.

I run NIS from my PC and nothing is detected. I then uninstall and
re-install NIS. As part of that process NIS does a partial scan. Nothing
detected. I upload all the updates, restart and do a full scan - nothing
found on my PC.

Apart from "norton is crap" anyone got any idea why an on line check
would detect the virus when the PC located programme would not?

 

To con the unwary into buying the full thing?

 

http://www.microsoft.com/security/protect/default.asp

http://www.microsoft.com/downloads/...8b-fe98-493f-ad76-bf673a38b4cf&DisplayLang=en

same thing but shorter


--
Steve Parry
K100RS SE
F650

http://www.gwynfryn.co.uk

 

http://tinyurl.com/3h8kw


--
Steve Parry
K100RS SE
F650

http://www.gwynfryn.co.uk

 

Is NIS up to date?
Have you tried other online checkers? McAfee, for instance, has a Stinger
utility (http://us.mcafee.com/virusInfo/default.asp?id=stinger) and an
online check (http://us.mcafee.com/root/mfs/default.asp?cid=9059).

 

Just a thought. Are you running Windows XP? It can have this lovely habit of
restoring infected system files from the last restore point.

 

and you do this how?

 

Close all open programs. Then, right-click My Computer on the Windows
desktop.


Click Properties.


Click the System Restore tab.


Click checkbox Turn off System Restore
(or checkbox Turn Off System Restore on all drives)


Click OK.


Click Yes when prompted to turn off System Restore.


Ok your way out.


This disables the System Restore feature and will purge the contents of
the _RESTORE folder.

After finishing the removal instructions, repeat steps 1 through 7,
except in step 4,
choose: uncheck checkbox Turn Off System Restore and OK your way out
again.

 

it certainly is.

nope but I shall because I am getting RPC shut downs on the system which
is indicative of the blaster worm. A full system scan shows no infection
but frankly I don't believe it.

 

As well as running the virus scans, make sure you update using Windows
Update. The hole that allows Blaster to do the RPC shutdowns was
patched a long time ago.

 

As Ben says, removing it isn't enough - you need to update Windows to stop
it coming back.

In IE - Tools -> Windows Update and install the critical updates.

Once that's done, run the AV software to remove Blaster and then it
shouldn't come back.

 

Yes - I know I am not the most knowledgeable techno geek on the group
but even I am able to follow the basics such as Windows Update, running
anti-virus software etc. I have done all those things and my settings
are such that I should be up to date all the time. However the way this
machine is operating makes me intensely suspicious despite taking what
are deemed to be necessary steps recommended by the experts.

I am not decrying anybody's help or suggestions - they are appreciated -
but I remain sceptical about whether my machine is actually protected.

 

As well as updating Windoze, you'll be wanting a firewall - if you're
running XP, you need to enable it. If not, ZoneAlarm is adequate and
free.