If you believe you have been infected with a new virus, or if your Internet Service has been disabled for virus activity, the instructions below may help you disinfect your computer. If you do not have Internet access, save the appropriate patch and the stinger tool to a disc from a computer with Internet access and apply to the infected computer. Please note that the stinger tool below is not a substitute for full anti-virus software and only scans for a limited number of viruses. It is provided as a quick fix for disinfection from specific viruses and should be followed by a full scan of your computer with the most recent version of your anti-virus software.

The most recent virus attacks take advantage of a flaw in Windows operating systems that allow hackers to gain access to the host computer. Microsoft has released a number of patches that users can install to close this open door to hackers.

Step 1: Follow the link below, select "scan for updates" and install any critical updates that are found for your system.

http://v4.windowsupdate.microsoft.com/en/default.asp

Step 2: Scan your machine for viruses using the tool below:

Download the tool: http://download.nai.com/products/mcafee-avert/stinger.exe
Instructions: http://vil.nai.com/vil/stinger/

After running the scan, go to File | Save Report to File and it will put it into your My Documents folder as stinger.txt

PLEASE EMAIL POSITIVE RESULTS TO support@onshore.com - no further action should be required.

-- from http://vil.nai.com/vil/stinger/ --

This version of Stinger includes detection for all known variants, as of October 10th, 2003:

• BackDoor-AQJ
• Bat/Mumu.worm
• Exploit-DcomRpc
• IPCScan
• IRC/Flood.ap
• IRC/Flood.bi
• IRC/Flood.cd
• NTServiceLoader
• PWS-Sincom
• W32/Bugbear@MM
• W32/Deborm.worm.gen
• W32/Elkern.cav
• W32/Fizzer.gen@MM
• W32/FunLove
• W32/Klez
• W32/Lirva
• W32/Lovgate
• W32/Lovsan.worm
• W32/Mimail@MM
• W32/MoFei.worm
• W32/Mumu.b.worm
• W32/Nachi.worm
• W32/Nimda
• W32/Sdbot.worm.gen
• W32/SirCam@MM
• W32/Sobig
• W32/SQLSlammer.worm
• W32/Yaha@MM

-- end --

Failure to clean and protect your system from this vulnerability may result in disconnection of service!

For current information on recent virus alerts click here and hoaxes click here.

*Please note, while onShore is providing this information to help repair the MSBlast and other worms, onShore is not responsible for any damage that the contents of this document may cause to your computer.

If additional assistance is needed please contact technical support at 312.850.5200 option 2, 3 or email support@onshore.com.