Re: Ending the Worm process??

From: Passion (Louu2_at_hotmail.com)
Date: 08/15/03


Date: Fri, 15 Aug 2003 04:08:35 -0700


Thanks for that.. Ive already fone the fire wall thingie
& gotten rid of the virus & now used the patch. I still
have msblast.exe, so even though I dont have the virus
anymore, I still have to delete it?? yeh?

>-----Original Message-----
>1. CTRL-ALT-DELETE to bring up the Task Manager. Look
for msblast.exe and
>select it and End Process. This will stop the computer
from shutting down.
>It doesn't remove the worm.
>
>To enable your firewall :
>- Click Start
>- Click Control Panel
>- Double Click "Network Connections"
>- Right-click on your Dial up Connection, then left
click 'Properties'
>- Left Click 'Advanced' Under "Internet Connection
Firewall" tick the box
>'Protect my computer and networking by limiting or
preventing access to this
>computer from the internet'
>- Click Ok and Close the "network connections" box.
>You can then connect to the Internet and download the
Microsoft relevant
>patch.
>
>W32.Blaster.Worm patch is available here:-
>www.microsoft.com.au/blasterhelp
>You must download and install the patch. In many cases,
you will need to do
>this before you can continue with the removal of the
worm.
>Because of the way the worm works, it may be difficult
to connect to the
>Internet to obtain the patch, definitions, or removal
tool before the worm
>shuts down the computer. It has been reported that, for
users of Windows XP,
>activating the Windows XP firewall may allow you to
download and install the
>patch, obtain virus definitions, and run the removal
tool. This may also
>work with other firewalls, although this has not been
confirmed.
>
>2. You can download the Symantec Removal Tool from here
>http://securityresponse.symantec.com/avcenter/venc/data/w
32.blaster.worm.removal.tool.html
>
>or you can visit this site to assist in the removal of
the worm
>http://www.kellys-korner-xp.com/xp_qr.htm#rpc
>
>
>"Passion" <Louu2@hotmail.com> wrote in message
>news:08c401c3631a$5390bd80$a401280a@phx.gbl...
>> should I do this????
>>
>> 2. Ending the Worm process
>>
>> Press Ctrl+Alt+Delete once.
>> Click Task Manager.
>> Click the Processes tab.
>> Double-click the Image Name column header to
>> alphabetically sort the processes.
>> Scroll through the list and look for Msblast.exe.
>> If you find the file, click it, and then click End
>> Process.
>> Exit the Task Manager.
>
>.
>



Relevant Pages

  • Re: system shut down
    ... You might have the sasser virus or the blaster virus ... To stop shutdown, click Start, click Run and type: ... It doesn’t remove the worm. ... You can then connect to the Internet and download the Microsoft relevant patch. ...
    (microsoft.public.windowsupdate)
  • Re: RPC security error is restarting my comp
    ... Yesterday while having looked at the microsoft support ... Is the original problem actually the worm which I have ... >install the patch mentioned above. ... >It is suggested that you first download the patch to your ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Installing a MS Patch killed my computer
    ... Best bet would've been to remove the worm before trying to install the ... patch - you're trying to lock the barn door after the cows have gotten out. ... Windows XP, Windows 2000, Windows Server 2003, Windows NT ... Symptoms of the virus: Some customer may not notice any symptoms at all. ...
    (microsoft.public.win2000.security)
  • Re: RPC ERROR
    ... > It doesn’t remove the worm. ... > W32.Blaster.Worm patch is available here:- ... > You must download and install the patch. ... > patch, obtain virus definitions, and run the removal tool. ...
    (microsoft.public.windowsupdate)
  • Re: RPC security error is restarting my comp
    ... or reboot, quickly go to: ... > Is the original problem actually the worm which I have ... >>install the patch mentioned above. ... >>It is suggested that you first download the patch to your ...
    (microsoft.public.windowsxp.security_admin)