Firewall XP Home

[Worldlife]

As a newbie to XP Home I was surprised that it was not mentioned that the firewall, for what it is worth, has to be a selected option....

Network connection>Right click>Advanced>

to enable Internet Connection Firewall (ICF) select Protect my computer and network by limiting or preventing access to this computer from the Internet

Does this replace the need for Zone Alarm or similar?

[seaviewuk]

Disable the XP firewall and install ZoneAlarm, Zone Alarm is more robust

[stonesman]

Originally posted by seaviewuk
Disable the XP firewall and install ZoneAlarm, Zone Alarm is more robust

Exactly my experiance.

[Worldlife]

Good advice folks ..Virgin Net in a circular email endorse that advice and seem to be hinting at a campaign to insist that Microsoft provide an effective firewall.........

Firstly, you should ensure that you install a Firewall application on your computer. A Firewall prevents unauthorised access to your computer and will block viruses. You should also ensure that you regularly update your Firewall application as new viruses keep appearing. Microsoft XP comes equipped with a Firewall - or you can download and install a free Firewall from www.zonealarm.com. Virgin.net cannot guarantee that the Microsoft Xpfirewall will prevent a virus getting through. If the firewall is not effective please contact Microsoft directly.

OK Microsofts own firewall may not right now be the best in the world but surely the default position should be ON. Note also the reference to updating the firewwall application. Maybe a new Microsoft program is more effective than an outdated copy of what was a program effective when first installed.

Virgin's circular is so helpful that it's probably worth quoting the entire email..........

Dear customer,

Important information for all Internet users

You may have read recently that a computer virus known as MSBlast or Lovsan is affecting computers with Microsoft Windows XP and other software packages. Its effect
is to cause computers to reboot repeatedly. MSBlast is a type of virus known as a "worm" which does not appear to cause permanent damage but is a threat to be taken seriously.

We at Virgin.net are committed to providing you with the best service we can and so, although this virus does not relate to our service, we would like to offer you this advice on how to protect your computer or how to remove the virus, if you have been affected.

Which computer operating systems are affected?

Users of the following operating systems could be affected: Windows XP, Windows 2000, Windows Server 2003, Windows NT 4.0, NT 4.0 Terminal Services Edition.

What is the name of the virus?

Microsoft refers to this virus as the "W32.Blaster.Worm", but it is also known as W32/Lovsan.worm, WORM_MSBLAST.A, Win32.Posa.Worm.

How do you know if your computer has the virus?

The most common symptom of the virus is that your computer will reboot every few minutes, without your input. You may also find that a file called msblast.exe has been created in your computer's WINDOWS SYSTEM32 directory.

How do you avoid getting the virus?

Firstly, you should ensure that you install a Firewall application on your computer. A Firewall prevents unauthorised access to your computer and will block viruses. You should also ensure that you regularly update your Firewall application as new viruses keep appearing. Microsoft XP comes equipped with a Firewall - or you can download and install a free Firewall from www.zonealarm.com. Virgin.net cannot guarantee that the Microsoft Xpfirewall will prevent a virus getting through. If the firewall is not effective please contact Microsoft directly.

Users of the operating systems listed above, in the section 'Which computer operating systems are affected?' should enhance their software with the latest update called a "patch". The patch that will address this issue is called MS03-026. Updating your computer with this patch will prevent infection from this type of virus.

Customers that have previously applied the security patch MS03-026 before today are protected and no further action is required.



How do you know if you have the virus?

To detect this virus, search for msblast.exe in the WINDOWS SYSTEM32 directory or download the latest anti-virus software signature from your anti-virus vendor and scan your machine.

A number of software vendors are working together to overcome this virus. Additional information on this virus is available from any of the following links:

Network Associates:
http://us.mcafee.com/virusInfo/defau...virus_k=100547

Trend Micro:
http://www.trendmicro.com/vinfo/viru...WORM_MSBLAST.A

Symantec:
http://securityresponse.symantec.com...ster.worm.html

Computer Associates:
http://www3.ca.com/virusinfo/virus.aspx?ID=36265

Microsoft's Virus Information Alliance: http://www.microsoft.com/technet/security/virus/via.asp

If you have the Virus how do you remove it?

1. In order to remove this virus please follow these instructions:

Do a search for msblast.exe (usually found in system32 folder)
Delete it.
Click Start and select Run
Type msconfig & click OK
Select the start-up tab
Disable msblast
Reboot machine and enable your Firewall or anti-virus software.

Alternatively

Security specialists Symantec have released a tool which will remove the current infection from your computer. To download this tool, go to www.symantec.com and go to the security response section. Then click the W32.Blaster.Worm link in the latest virus threats section. This page offers more information regarding the worm, and a downloadable tool to remove it.

2. Once you have removed the virus, immediately select one of the links below to install the security patch needed to ensure no repeat infection occurs.

http://securityresponse.symantec.com...ster.worm.html

http://microsoft.com/technet/treevie...n/MS03-026.asp

If you are away from your machine or are unable to get on-line, then the above links will provide patches which are small enough to download from another PC on to a floppy disc, to install on your PC at a later date.

For further information

Should you require additional assistance please call our Free phone Service Announcement Line on 0800 052 4329 for the latest update on this issue.

Yours sincerely,


Customer Service Manager
Virgin.net

[stonesman]

W/L I got the email as well. It was on another forum the advice was to turn off MS firewall and get a "decent one".
I turned it on just this past couple of days with all the noise about
Blaster in an effort to reinforce protection.

[Worldlife]

Stonemason the points I am trying to make are:-

Microsoft knowing the weaknesses of Explorer and Outlook should improve the security of the two products

If Microsoft are providing a firewall it should be of designed to be effective. It is a feature that one has paid for in purchasing XP

The default position of the Microsoft firewall should be "on" and not "off" as it was on my supplied copy of XP operating system

[stonesman]

W/L I agree with you whole heartedly. It should be as effective as
anything else out there. I can't remember what my default was.
I'll probably knock mine off again as this whole Blaster thing has turned out to be a damp squib.

In that it was so easy to get out off.

[silver]

The default position of the Microsoft firewall should be "on" and not "off" as it was on my supplied copy of XP operating system

the default position for all the weird services m$ XP runs should be off and not on

unfort it seems they take the approach to default config the OS to have everything turned on and the firewall off so that it's easier for people to get it connected to things,. (like worms )

Sil

[stonesman]

[Worldlife]

@sil

Is it being a novice at both XP and a touchbad that causes all Microsoft programs and services to flash up at the slightest excuse or is there a conspiracy behind it all?:

[stonesman]

It's OK W/L, I see your comments were aimed at silver but here is a little program that will disable a lot of the nuisance stuff in XP.
This is not the very latest but there is little difference.

[stonesman]

Here is another tried and trusted offering from BlackViper, many people use his settings. I noted my own default settings and then
changed to his. I never have a problem.

http://www.blkviper.com/WinXP/servicecfg.htm