Geek Squad Offers Tools and Recommendations for Protecting Your Computer from Viruses

Business Wire, August 12, 2003

Computer/Lifestyle/High-Tech Writers

MINNEAPOLIS--(BUSINESS WIRE)--Aug. 12, 2003

W32.Blaster Worm virus infects computers globally

In the wake of the W32.Blaster Worm virus taking over thousands of computers around the country and the globe, Geek Squad, a 24-Hour Computer Support Task Force, is releasing recommendations and fixes for the new worm virus. The virus uses the vulnerability patched with Microsoft Security Bulletin MS03-026.

Operating systems that are affected include: Windows XP, Windows 2000, Windows NT 4.0, Windows Server 2003. The W32.Blaster Worm also is known as MBlaster, W32/Lovsan.worm, MSBlast, W32.blaster.worm, Win32.posa.worm and Win32.poza.worm.

Viruses are very small programs that have no other purpose than to spread themselves to as many computers as possible. Viruses can spread from computer to computer. They can cause software damage and data loss, but there are vaccines against getting viruses.

While not every virus will erase your files on your hard drive, they should still be taken very seriously. With the rapid growth of the Internet, viruses are spreading even more rapidly. Viruses are also becoming more and more deadly. There are already thousands of different viruses and new ones emerge every week.

If you think you have a virus or for more information on this and other viruses, visit www.geeksquad.com. If you live in Chicago, Minneapolis, Los Angeles, Phoenix, San Francisco or Washington, D.C. call 1-800 GEEK SQUAD (800-433-5778) to schedule an on-site Special Agent to remove the virus. Geek Squad can also install software on your computer that automatically updates itself to stop viruses before they get to your computer.

NOTE: You should only attempt manual removal of worms and viruses if you have advanced knowledge of computers - otherwise you may cause greater harm to your computer.

For more information on this worm and for removal instructions, visit http://securityresponse.symantec.com/avcenter/venc/data /w32.blaster.worm.html.

(Due to the length of this URL, it may be necessary to copy and paste this hyperlink into your Internet browser's URL address field.)

Here's what to do if you can't boot your computer:

1. Disconnect network cable.

2. Boot the machine.

3. CTRL-ALT-DEL to open task manager and end process msblast.exe.

4. Might get shut down error (if so, open command line type "shutdown -a").

5. Search for msblast.exe, delete it. (c:\windows\system32\).

6. Open Regedit, remove "msblast.exe" from the "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" key. It will probably be titled "windows auto update".

7. Turn on the firewall in the advanced properties of the current network adapter the computer is using.

8. Renew IP, or Restart computer. Again, you might get the RPC error... (if so, open command line type "shutdown -a").

9. The firewall may generate errors if msblast.exe is still running. (Double check the registry, msconfig, and that it's not currently running) Kill it if it is.

10. If firewall works go to critical updates and install 823980. It may give you a QFE error. If this happens, download all of the updates. This should take care of it.

11. Update virus definitions and patch software firewalls.

12. Reboot.

13. When you come back, triple check. Is msblast.exe running?

14. If it is, try doing the above steps in different orders.

Preventative Maintenance

-- Make sure that all computers have anti-virus software

installed (see recommendations below).

-- Update your virus definition files from the manufacturer's

website at least once a month.

-- Most viruses are spread via floppy disk and e-mail attachments

- scan these before you allow them on your computer.

Risks

-- Update your virus tools - Definition files need to be updated

weekly or else you may not detect the newest viruses.

-- Patch your system - Make sure you update your operating system

for the latest patches.

-- Scan everything - Many times, a virus will re-emerge even

after you remove it. It usually comes back from a laptop or

floppy disks that were not scanned the first time - make sure

you thoroughly scan ALL computers and disks for viruses.

Resources for Support

www.Housecall.antivirus.com - This site offers a free scan online by using an ActiveX applet. It is updated every few days on the latest viruses.

www.GeekSquad.com - We provide 24-hour computer support on all Dos, Windows, and Macintosh computers for individuals and corporations.

www.mcafee.com - Network Associates owns McAfee, one of the best anti-virus products. They provide a free anti-virus scan of your computer over the Internet.

www.cert.org - CERT stands for Computer Emergency Response Team. CERT operates from Carnegie-Mellon University and issues virus warnings and other computer-related emergency alerts to the public. This is a very reliable source of information.

About The Geek Squad

The Geek Squad is a 24 Hour Computer Support Task Force. With our focus solely on computer and network support, we offer flat-rate pricing for carry-in, on-site or emergency service for everything from setups and installs to upgrades. Be it Windows or Macintosh, hardware and/or software, we've got you covered. Whether your laptop is dead, your network is down, your hard drive is crashed, your printer won't print, or you just need to get onto the Internet, we can help you. We provide our services wherever and whenever you need them - 24 hours a day, 7 days a week.