Re: Ending the Worm process??

From: Taurarian (taurarian_at_hotmailNOSPAM.com)
Date: 08/15/03


Date: Fri, 15 Aug 2003 21:31:21 +1000


yeh!
Rescan your system to make doubly sure you have got rid of the virus.

"Passion" <Louu2@hotmail.com> wrote in message
news:02d801c3631d$91f7bf80$a001280a@phx.gbl...
> Thanks for that.. Ive already fone the fire wall thingie
> & gotten rid of the virus & now used the patch. I still
> have msblast.exe, so even though I dont have the virus
> anymore, I still have to delete it?? yeh?
>
> >-----Original Message-----
> >1. CTRL-ALT-DELETE to bring up the Task Manager. Look
> for msblast.exe and
> >select it and End Process. This will stop the computer
> from shutting down.
> >It doesn't remove the worm.
> >
> >To enable your firewall :
> >- Click Start
> >- Click Control Panel
> >- Double Click "Network Connections"
> >- Right-click on your Dial up Connection, then left
> click 'Properties'
> >- Left Click 'Advanced' Under "Internet Connection
> Firewall" tick the box
> >'Protect my computer and networking by limiting or
> preventing access to this
> >computer from the internet'
> >- Click Ok and Close the "network connections" box.
> >You can then connect to the Internet and download the
> Microsoft relevant
> >patch.
> >
> >W32.Blaster.Worm patch is available here:-
> >www.microsoft.com.au/blasterhelp
> >You must download and install the patch. In many cases,
> you will need to do
> >this before you can continue with the removal of the
> worm.
> >Because of the way the worm works, it may be difficult
> to connect to the
> >Internet to obtain the patch, definitions, or removal
> tool before the worm
> >shuts down the computer. It has been reported that, for
> users of Windows XP,
> >activating the Windows XP firewall may allow you to
> download and install the
> >patch, obtain virus definitions, and run the removal
> tool. This may also
> >work with other firewalls, although this has not been
> confirmed.
> >
> >2. You can download the Symantec Removal Tool from here
> >http://securityresponse.symantec.com/avcenter/venc/data/w
> 32.blaster.worm.removal.tool.html
> >
> >or you can visit this site to assist in the removal of
> the worm
> >http://www.kellys-korner-xp.com/xp_qr.htm#rpc
> >
> >
> >"Passion" <Louu2@hotmail.com> wrote in message
> >news:08c401c3631a$5390bd80$a401280a@phx.gbl...
> >> should I do this????
> >>
> >> 2. Ending the Worm process
> >>
> >> Press Ctrl+Alt+Delete once.
> >> Click Task Manager.
> >> Click the Processes tab.
> >> Double-click the Image Name column header to
> >> alphabetically sort the processes.
> >> Scroll through the list and look for Msblast.exe.
> >> If you find the file, click it, and then click End
> >> Process.
> >> Exit the Task Manager.
> >
> >.
> >



Relevant Pages

  • Re: system shut down
    ... You might have the sasser virus or the blaster virus ... To stop shutdown, click Start, click Run and type: ... It doesn’t remove the worm. ... You can then connect to the Internet and download the Microsoft relevant patch. ...
    (microsoft.public.windowsupdate)
  • Re: RPC security error is restarting my comp
    ... Yesterday while having looked at the microsoft support ... Is the original problem actually the worm which I have ... >install the patch mentioned above. ... >It is suggested that you first download the patch to your ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Installing a MS Patch killed my computer
    ... Best bet would've been to remove the worm before trying to install the ... patch - you're trying to lock the barn door after the cows have gotten out. ... Windows XP, Windows 2000, Windows Server 2003, Windows NT ... Symptoms of the virus: Some customer may not notice any symptoms at all. ...
    (microsoft.public.win2000.security)
  • Re: RPC ERROR
    ... > It doesn’t remove the worm. ... > W32.Blaster.Worm patch is available here:- ... > You must download and install the patch. ... > patch, obtain virus definitions, and run the removal tool. ...
    (microsoft.public.windowsupdate)
  • Re: RPC security error is restarting my comp
    ... or reboot, quickly go to: ... > Is the original problem actually the worm which I have ... >>install the patch mentioned above. ... >>It is suggested that you first download the patch to your ...
    (microsoft.public.windowsxp.security_admin)