Re: Blaster Worm
From: Jupiter Jones [MVP] (jones_jupiter_at_hotnomail.com)
Date: 09/22/03
- Next message: Bill Sanderson: "Re: Virus Email Frequency"
- Previous message: Pam: "Some post's don't show up on board???"
- In reply to: NKill: "Blaster Worm"
- Next in thread: Bill Sanderson: "Re: Blaster Worm"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 21 Sep 2003 22:01:36 -0600
Try this.
You most likely have a worm W32.Blaster.Worm
DISCONNECT the subject computer from any network IMMEDIATELY.
If necessary to stop the reboot process:
Start/Run
Type "shutdown -a" ENTER
Install or enable a firewall IMMEDIATELY, before connecting to the
internet:
http://support.microsoft.com/?kbid=283673
VERY IMPORTANT to follow ALL steps, closing ports or installing the
patch is NOT enough.
Download the patch and regedit referenced in the article below.
You may need to do this at an uninfected computer and burn to CD or
save on floppies.
Each file is small enough to fit on a floppy.
Follow this to clean and protect your computer:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc
After this is resolved prevent similar occurrences by installing ALL
Critical Updates from Windows Update.
Keep antivirus up to date and run at least weekly.
Install or enable a firewall.
See also:
http://support.microsoft.com/?kbid=826955
http://www.microsoft.com/security/incident/blast.asp
-- Jupiter Jones [MVP] An easier way to read newsgroup messages: http://www.microsoft.com/windowsxp/pro/using/newsgroups/setup.asp http://dts-l.org/index.html "NKill" <gandnk@yahoo.com> wrote in message news:050301c380ae$5cc6c0a0$a401280a@phx.gbl... > I have the msblast.exe in my c:\windows\system32 file. I > have run the Symantec Blaster removal tool and it says > that it has removed the virus. However, this file still > remains and cannot be deleted. My NAV is constantly > popping up a window saying it cannot remove or repair > this file. > > I have also tried to run the patch WindowsXP-KB823980-x86- > ENU.exe and get a message that it cannot verify > update.inf, make sure Cryptographic Service is running, > which it is. > > Can anyone help.
- Next message: Bill Sanderson: "Re: Virus Email Frequency"
- Previous message: Pam: "Some post's don't show up on board???"
- In reply to: NKill: "Blaster Worm"
- Next in thread: Bill Sanderson: "Re: Blaster Worm"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
