Re: ? Need help with Nachi.worm/Blaster
From: Paul [MSFT] (pauly_at_online.microsoft.com)
Date: 01/21/04
- Next message: Dave Douglas: "Re: Shopnav - Srng"
- Previous message: Paul [MSFT]: "Re: Blaster worm : hungapp"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 21 Jan 2004 20:14:31 GMT
Hi Alec,
Regarding your post below on creating a removal script for Nachi/Blaster,
perhaps this might not be needed. Since your post original post Microsoft
has released a Blaster/Nachi removal tool to accomplish this. Check out the
tool and evaluate whether it meets your need or if you want to continue
with developing your script.
NEW BLASTER REMOVAL TOOL:
833330 A tool is available to remove Blaster worm and Nachi worm infections
http://support.microsoft.com/?id=833330
=========
This posting is provided "AS IS" with no warranties, and confers no rights.
Windows XP Security Homepage:
http://www.microsoft.com/windowsxp/security/default.asp
Windows 2000 Security Homepage:
http://www.microsoft.com/windows2000/security/default.asp
Top 10 Windows Newsgroups Security Questions:
http://www.microsoft.com/technet/newsgroups/default.asp?url=/technet/newsgro
ups/nodepages/sectop10.asp
=========
Paul Hayes, MCSE
Product Support Services
Microsoft Corporation
pauly@online.microsoft.com
--------------------
| From: "Alec Soroudi" <a@a.com>
| Subject: Re: ? Need help with Nachi.worm/Blaster
| Date: Fri, 19 Dec 2003 18:04:18 -0500
|
| Thank you but I am already aware of that site. I am fully inoculated
| against it and am not concerned about it. What I am trying to do is to
| create a script that removes the files and registry entries automatically
| for use by others who are infected. The method described on the site is
| incomplete, it does not remove the registry entries in the Enum\Root key.
|
| Anyway, it doesn't matter; I have to restore my system soon and when I
| do I'll get the info I need to test it.
| --
| Alec S.
| alec @ synetech . cjb . net
- Next message: Dave Douglas: "Re: Shopnav - Srng"
- Previous message: Paul [MSFT]: "Re: Blaster worm : hungapp"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
