Worm Check

[Ketadream]

if you open a dos window...and paste this in...

netstat -A && find "ESTABLISHED" && pause

Look for 4444 or 135 if anything is connecting on those ports your screwed...

[High Quality]

i'm good on my laptop..

[Argoz]

I'm ok

[Ice]

[sweet7]

what worm is this for?

[Ketadream]

Are you living in a cave?

[EscortBiz]

also check 3525

[nosey]

Originally posted by sweet7
what worm is this for?

[loverboy]

im clean, so what is it all about?

[Phoenix]

can you tell me how to check those ports?

im not very techie...

[qxxx]

ok, i was infected... i installed the patch from microsoft and launched the Blaster Removal tool from Symantec... now i am clean...

[Va2k]

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Sarah>netstat -A && find "ESTABLISHED" && pause

Active Connections

Proto Local Address Foreign Address State
TCP Thomas:epmap Thomas:0 LISTENING
TCP Thomas:microsoft-ds Thomas:0 LISTENING
TCP Thomas:1025 Thomas:0 LISTENING
TCP Thomas:1026 Thomas:0 LISTENING
TCP Thomas:1030 Thomas:0 LISTENING
TCP Thomas:4555 Thomas:0 LISTENING
TCP Thomas:5000 Thomas:0 LISTENING
TCP Thomas:16562 Thomas:0 LISTENING
TCP Thomas:netbios-ssn Thomas:0 LISTENING
TCP Thomas:3479 m3.spamarrest.com:pop3 TIME_WAIT
TCP Thomas:4555 64.12.29.40:5190 ESTABLISHED
UDP Thomas:microsoft-ds *:*
UDP Thomas:isakmp *:*
UDP Thomas:1031 *:*
UDP Thomas:1311 *:*
UDP Thomas:1312 *:*
UDP Thomas:1944 *:*
UDP Thomas:2410 *:*
UDP Thomas:2411 *:*
UDP Thomas:3839 *:*
UDP Thomas:4079 *:*
UDP Thomas:ntp *:*
UDP Thomas:netbios-ns *:*
UDP Thomas:netbios-dgm *:*
UDP Thomas:1900 *:*
UDP Thomas:ntp *:*
UDP Thomas:1900 *:*
UDP Thomas:3243 *:*
UDP Thomas:3703 *:*
UDP Thomas:4550 *:*

[Ketadream]

If your clean you should patch, might want to run that command if things get a bit weird...

[enzo]

were can i get the Blaster Removal tool from Symantec


thank you

[GotGauge]

CLICK HERE FOR REMOVAL TOOL

[enzo]

Originally posted by GotGauge
CLICK HERE FOR REMOVAL TOOL

thankz bro

[cold_ice]

So is this worm slowing shit down

[webair]

need to block form your routers

[Dirty F]

WTF is this?
http://207.245.61.194/

[iroc409]

heh, i called the cable co earlier and they had this new pre-recorded message about this little bitch, and gave out a makeshift "emergency center" 800-number

[Filter]

http://board.gofuckyourself.com/show...hreadid=163405

Prepare for this next one already out, now then.