Re: unable to remove W32.Baster

From: taff (taff_at_the-valleys.com)
Date: 12/31/03 

Date: Wed, 31 Dec 2003 04:48:45 +0000

On Tue, 30 Dec 2003 19:03:26 -0800, "A Brown" <ajbrown@hotmail.com>
wrote:

>Well, I got blaster virus in my system today. But I am unable to stop or
>remove it.
>
>When I click ctrl+Alt+Del to get to Windows Task manager, there is NO
>MSBlast or anything like it in the "Process".
>However, in the "Application" there is a "System Shutdown". I am unable to
>stop it by "end process".
>I ran the Symantec's fixblast.exe tool 1.0.6.1 and it did NOT find the
>virus.
>I ran the Microsoft W32.MSBlaster patch, it did NOT fix or stop the virus.
>I run services.msc and found "Remote Recovery Call (RPC)"., but I when I
>right click, no "properties".
>I am able to start this RPC, but the Blaster still keep ticking.
>
>When I boot from XP CD disc to recovery console, I am unable to access any
>other folder such as "Documents and Settings" to look or remove for this
>virus. Can you tell me where and how?
>
>Appreciate your help.
>

Try stinger from Mcafee. It is a free download from
http://vil.nai.com/vil/stinger/
Start in safe mode by pressing F8 on startup. It will find and delete
the virus which could be one of many.

Taff...........

www.sounds-pa.com | www.thecomputerworkshop.com

Relevant Pages

  • Re: [Full-disclosure] Office 0day
    ... more and continue consulting for microsoft rather than criminal networks. ... to fix the product if it is flawed. ... That is like me trying to argue that after going to a car mechanic, ... "Members of the jury, by keeping quiet about the bug and not shipping a patch, ...
    (Full-Disclosure)
  • Re: In regards to MS IE 6.0 Critical update 834489 - Workarounds do not work.
    ... >> not fix our problems at all. ... >> Microsoft partner, and we depend FULLY on IE. ... >> Each IP video server has HTTP authentication to protect ... >> With this patch basically renders our ENTIRE software ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Immediate Logoff
    ... What I am saying is that there is no magic button that MSFT can push to fix the problem unless you can give them some information, ... Microsoft MVP - Terminal Server ... however think it is ironic how it happened from a patch. ... Do you know where I can report this to Microsoft for free? ...
    (microsoft.public.windows.terminal_services)
  • Re: A 6% fix from Microsoft Security Bulletin MS03-040 - 828750
    ... | install the patch, they could have been ready to pull the ISP plug. ... | If there is no active virus/worm/Trojan, then it's ok for Microsoft to say ... |> | involving them self's in anti virus issues affecting their products). ...
    (microsoft.public.security)
  • Re: A 6% fix from Microsoft Security Bulletin MS03-040 - 828750
    ... | install the patch, they could have been ready to pull the ISP plug. ... | If there is no active virus/worm/Trojan, then it's ok for Microsoft to say ... |> | involving them self's in anti virus issues affecting their products). ...
    (microsoft.public.security.virus)