Re: "MSBLAST" IN MY COMPUTER... ...HELP PLEASE

From: DL (dl_at_DONTBUGMEpgen.net)
Date: 08/30/03


Date: Sat, 30 Aug 2003 16:57:03 +0100


You might care to check www.symantec.com for info on what files may be
appended/altered. Precise removal info is also available. You could also
initiate an online scan at this site, ensure McAffee is not running when
doing so.
Presumably the McAfee site has similar facilities/info, but I dont use it
so....
Zonealarm should co-exist with XP firewall, so perhaps it should be
configured to start on logon?
Re: dead C, Format frm DOS....?
Format/Reinstall is a last resort
PS some people get upset at cross posting
David

"T O M M Y" <TOM1201@hotmail.com> wrote in message
news:OqdcvwwbDHA.2428@TK2MSFTNGP09.phx.gbl...
> Dear XP experts,
>
> please help me with this worm:
>
> On "August , 30"(today) After being sure I have my firewall on (just
XP's),
> I connected to the internet via my dial up modem and directly ran my
McAfee
> to get
> the latest version of virus signatures. After downloading the signature
and
> applying them suddenly the "Generic Host Processor for Win 32" encountered
a
> problem and closed . Then the dirty Msblast caused my computer to restart
;
> The window appeared was the same which was shown on
> Microsoft web site and was saying:
>
> " Windows is shutting down. Please save all your work in progress....
> .........This shutdown was initiated by NT AUTHORITY\SYSTEM"
>
> Oh God! after logging on after that restart I directly turned the system
> restoreoff in all drives, ran my ZoneAlarm (Which was turned off at the
> moment of disaster) and connected to internet to make sure I
> have the latest updated from MacAfee.Well it was up ot date. Then I
> disconnected and ran my Antivirus.....No worm was detected, nothing,
> in no drive , nothing.....
>
> And now each time I connect to the internet this message appears by
> ZoneAlarm:
> "Generic Host Processor for Win 32 wants to connect to internet.
> Do want to allow this program access the...." And I choose "no"
ofcourse.
> ....Then after this the
> same message appears again! I again choose "NO"....then it does not do
any
> thing....
>
> I have problems updating my windows XP, and I am sure my McAfee is up to
> date , but can't detect any thing .
> Well , What can I do know?...Till now I am writing this no message from
the
> worm has appeared,(about 45 minutes after the restart)
> When will it appear again? And what can I Do? How can I remove it from my
> computer? Shall i install XP again and format all drives?
>
>
> (PS: My XP is installed on D: . My dead 98 is installed on C, but I can
not
> format the drive C in XP now, because a message says: "Windows can't
format
> this drive.Be sure it is not in use or no window from it is open.."
> Although no window is open and no program uses that drive...I have also
> checked Task Manager, but no Msblast.exe process was there..although I saw
> some new processes.......Also checking my XP firewall.. it was off!.. I am
> sure I didn't turn it off...)
>
> Any Help is Much Regarded
>
> PS.2 : I have ran my MacAfee 6 times from that incident occurred but
nothing
> yet......
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>



Relevant Pages

  • Re: XP Scandisk error-now need to format drive
    ... Running chkdsk E:/R pops open a very quick DOS window which stays open ... I can now run format for the drive and it does ... after the restart it again tells me the drive needs to be formatted. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Custom ID Field
    ... code window, and in the Immediate window, paste: ... When I exit the format box, it auto corrects me EVERY time. ... database and build up a small table, then a form, and go from there. ... Can the GetNextJobNumber function output in my format? ...
    (microsoft.public.access.formscoding)
  • Re: Multiple date formats in a Table
    ... Duplicating the date in a second date field is certainly one way of doing ... window, then click on "New". ... Once you've got a function that works, create a new query in design ... > with date format and field properties. ...
    (microsoft.public.access.tablesdbdesign)
  • Re: OLE and External Edit
    ... +36 = window handle of display holding file ... +52 = Session number ... format = 2 ... Why should the OLE server need to know this information? ...
    (comp.sys.acorn.programmer)
  • RE: Export Specification?
    ... MSysIMEXSpecs and MSysIMEXColumns tables, to view the information in a more ... The Export Text Wizard window pops up. ... file format info and field info for this particular specification will be ...
    (microsoft.public.access.modulesdaovba)

Loading