Check my BIOS for a virus

[trickster]

http://securityresponse.symantec.com...oval.tool.html

I still have a blaster worm virus. Someone from support oat the trace for VisualRoute told me i have a virus. I will post the whole e-mail below. If someone could help me please reply back. Thanks..

Hi Derek

Thank you for the attachments, I can confirm that the trace is complete however I cannot confirm the target you are tracing to verify accuracy as the input has not been included. Are you tracing an IP address (ie n.n.n.n format) or a domain name (ie www.????.??? Format). I can double check if you would like further confirmation, just email me the target you used and I will further verify if that will help you.

MORE WORRYINGLY: Unfortunately you have the blaster worm virus on your system; this may explain why you have been asking about whether the trace is complete as this will cause excessive activity in the table. In the table below on port 135 (marked in red) you will see msblast.exe is communicating. You need to immediately firewall that port (135) and use some virus software to remove the virus. I recommend Symantec but otherwise any major Virus product will work.

EDITED by Trickster
--------------------------------------------------------------------------------

From: Derek Santamassino
Sent: 01 March 2004 14:16
To: Julian Palmer
Subject: Re:

Hi,

I'm sending an attachment with 3 of them. Will you tell me from what you see did my trace finish?

----- Original Message -----

From: Julian Palmer

To: 'Derek Santamassino'

Sent: Monday, March 01, 2004 4:22 PM

Subject: RE:

Hi Derek,

Sorry for the delay, unfortunately we lost power to the house this evening and I had to take my family out for a meal. I think they bribed the power supply company!!

Anyway, the answer to your question is no, unlike VisualRoute CallerIP tracks the destination instantly and tells you the location immediately. As soon as you see the cross-hairs the location has been verified. The table at the bottom is really providing a new capability. It is tracking connections to your system in real-time (this is done continuously), the purpose being to alert you to when someone connects to you from the outside. The version you have is beta 5 which cannot distinguish outbound connections (ie you browsing to say yahoo.com) from in bound connections (ie a hacker attacking your system). Basically the table updates as soon as a connection inbound or outbound is established by your computer and it is up to you to know if the connection is good or suspect. CallerIP lets you click on the line item in the table CallerIP will look-up and validate the connecting address. Version beta 6 will be out in the next 24 hours, this version will highlight inbound versus outbound connections. I will send a copy when it passes Quality Assurance.

I hope this helps, let me know if not.

Best wishes

Julian
--------------------------------------------------------------------------------
From: Derek Santamassino [mailto:dsantamassino25@earthlink.net]
Sent: 01 March 2004 11:43
To: Julian Palmer
Subject:

Hi,

When i see the numbers in the yellow table moving does that mean my trace is done? Or how do i tell if my trace is done?

[stryder144]

d,

Here is a simple, four step routine that will help you out (I hope):

1. Go to Microsoft and download the Blaster removal tool that they have a link for.

2. Go to Windows Update and update your computer.

3. Go to AVG and download their Anti Virus program. Make sure it has the latest anti-virus definitions downloaded.

4. After you scan the heck out of your computer, go to ZoneAlarm and download the latest free ZoneAlarm firewall. Set it up (it includes a tutorial).

Now, you should be able to do business without any problems. If you are going to use Windows, you need to make sure that you use every tool available to you to keep yourself out of trouble. I've only had my Windows computer infected once. That was about six years ago. Totally wiped my hard drive for me. Ever since then, my AV and firewalls have kept me clean and in good health.

Cheers

[trickster]

Derek,

It is not wise to post your IP address.

I told you before that, if you did not install an antivirus, your machine would get infected. I even gave you links to a free one.

If you don't protect your computer, don't expect others to protect it for you.

Why are you asking for help on this, when you have already been told, countless times how to fix it and how to prevent it?

[shebang]

[quote author=trickster link=board=25;threadid=8615;start=0#msg77794 date=1075585414]
Just use Norton or Trend Micro and do a system scan.
[/quote]

Doesn't McFee give a free System Scan?

Blasterworm Virus is not the problem. My hard drive is fried. It's done for. I can still run Windows but other then that it's done. It would cost me a fortinue to have it re-built so i either have to buy one or find someone with a spear one.

[trickster]

Derek,

If your hard drive were damaged, you could not run Windows.

As far as I know, there is NOTHING softwarewise, that can physically damage a hard drive.

My first hard drive about 3 years ago needed a replacment because my BIOS told me and i still ran Windows.

[trickster]

That does not mean your current one needs a replacement.

By the way, you probably mean a spare hard drive, not a spear hard drive.

What is your basis for thinking your drive is damaged?

Oh my bad.. lol.. Will you edit the subject only?? If you want you can edit the topic too but i can do that. Thanks for the correction.

Well anyway i still need an upgrade on my drive. I have 40 GB and that isn't much..