Re: "MSBLAST" IN MY COMPUTER... ...HELP PLEASE
From: DL (dl_at_DONTBUGMEpgen.net)
Date: 08/30/03
- Next message: Shenan T. Stanley: "Re: security breach with XP and 98"
- Previous message: Bruce Chambers: "Re: Gator and Gain"
- In reply to: T O M M Y: ""MSBLAST" IN MY COMPUTER... ...HELP PLEASE"
- Next in thread: Frank Saunders MS-MVP, IE/OE: "Re: "MSBLAST" IN MY COMPUTER... ...HELP PLEASE"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 30 Aug 2003 16:57:03 +0100
You might care to check www.symantec.com for info on what files may be
appended/altered. Precise removal info is also available. You could also
initiate an online scan at this site, ensure McAffee is not running when
doing so.
Presumably the McAfee site has similar facilities/info, but I dont use it
so....
Zonealarm should co-exist with XP firewall, so perhaps it should be
configured to start on logon?
Re: dead C, Format frm DOS....?
Format/Reinstall is a last resort
PS some people get upset at cross posting
David
"T O M M Y" <TOM1201@hotmail.com> wrote in message
news:OqdcvwwbDHA.2428@TK2MSFTNGP09.phx.gbl...
> Dear XP experts,
>
> please help me with this worm:
>
> On "August , 30"(today) After being sure I have my firewall on (just
XP's),
> I connected to the internet via my dial up modem and directly ran my
McAfee
> to get
> the latest version of virus signatures. After downloading the signature
and
> applying them suddenly the "Generic Host Processor for Win 32" encountered
a
> problem and closed . Then the dirty Msblast caused my computer to restart
;
> The window appeared was the same which was shown on
> Microsoft web site and was saying:
>
> " Windows is shutting down. Please save all your work in progress....
> .........This shutdown was initiated by NT AUTHORITY\SYSTEM"
>
> Oh God! after logging on after that restart I directly turned the system
> restoreoff in all drives, ran my ZoneAlarm (Which was turned off at the
> moment of disaster) and connected to internet to make sure I
> have the latest updated from MacAfee.Well it was up ot date. Then I
> disconnected and ran my Antivirus.....No worm was detected, nothing,
> in no drive , nothing.....
>
> And now each time I connect to the internet this message appears by
> ZoneAlarm:
> "Generic Host Processor for Win 32 wants to connect to internet.
> Do want to allow this program access the...." And I choose "no"
ofcourse.
> ....Then after this the
> same message appears again! I again choose "NO"....then it does not do
any
> thing....
>
> I have problems updating my windows XP, and I am sure my McAfee is up to
> date , but can't detect any thing .
> Well , What can I do know?...Till now I am writing this no message from
the
> worm has appeared,(about 45 minutes after the restart)
> When will it appear again? And what can I Do? How can I remove it from my
> computer? Shall i install XP again and format all drives?
>
>
> (PS: My XP is installed on D: . My dead 98 is installed on C, but I can
not
> format the drive C in XP now, because a message says: "Windows can't
format
> this drive.Be sure it is not in use or no window from it is open.."
> Although no window is open and no program uses that drive...I have also
> checked Task Manager, but no Msblast.exe process was there..although I saw
> some new processes.......Also checking my XP firewall.. it was off!.. I am
> sure I didn't turn it off...)
>
> Any Help is Much Regarded
>
> PS.2 : I have ran my MacAfee 6 times from that incident occurred but
nothing
> yet......
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
- Next message: Shenan T. Stanley: "Re: security breach with XP and 98"
- Previous message: Bruce Chambers: "Re: Gator and Gain"
- In reply to: T O M M Y: ""MSBLAST" IN MY COMPUTER... ...HELP PLEASE"
- Next in thread: Frank Saunders MS-MVP, IE/OE: "Re: "MSBLAST" IN MY COMPUTER... ...HELP PLEASE"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|