Re: unable to remove W32.Baster
From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 12/31/03
- Next message: philip ashley: "Re: Internet Explorer does not launch"
- Previous message: anonymous_at_discussions.microsoft.com: "Re: Internet Explorer does not launch"
- In reply to: A Brown: "unable to remove W32.Baster"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 31 Dec 2003 02:19:17 -0500
Do what taff has indicated and when you do that also install following patch for the
RPC/RPCSS Buffer Overflow Vulnerability that is addressed by Microsoft Security Bulletin
MS03-39 http://support.microsoft.com/?kbid=824146
Please read: http://www.microsoft.com/security/incident/blast.asp
You also need a FireWall. If you don't patch the PC and not use a FireWall then you will
just be re-infected.
I also suggest the installation of *ALL* MS Critical Updates ASAP.
Dave
"A Brown" <ajbrown@hotmail.com> wrote in message
news:%23QG41q0zDHA.1660@TK2MSFTNGP09.phx.gbl...
| Well, I got blaster virus in my system today. But I am unable to stop or
| remove it.
|
| When I click ctrl+Alt+Del to get to Windows Task manager, there is NO
| MSBlast or anything like it in the "Process".
| However, in the "Application" there is a "System Shutdown". I am unable to
| stop it by "end process".
| I ran the Symantec's fixblast.exe tool 1.0.6.1 and it did NOT find the
| virus.
| I ran the Microsoft W32.MSBlaster patch, it did NOT fix or stop the virus.
| I run services.msc and found "Remote Recovery Call (RPC)"., but I when I
| right click, no "properties".
| I am able to start this RPC, but the Blaster still keep ticking.
|
| When I boot from XP CD disc to recovery console, I am unable to access any
| other folder such as "Documents and Settings" to look or remove for this
| virus. Can you tell me where and how?
|
| Appreciate your help.
|
|
- Next message: philip ashley: "Re: Internet Explorer does not launch"
- Previous message: anonymous_at_discussions.microsoft.com: "Re: Internet Explorer does not launch"
- In reply to: A Brown: "unable to remove W32.Baster"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
