Home Current News News Archive Shop/Advertise Ridecamp Classified Events Learn/AERC
Endurance.Net Home Ridecamp Archives
ridecamp@endurance.net
[Archives Index]   [Date Index]   [Thread Index]   [Author Index]   [Subject Index]

[RC] getting back contol of your computer - Michael Maul

Windows 98 and before are not affected by the worm.

You may be able to stop the worm from shuting off your computer by hitting Cntrl-Alt-Delete - going to the Taskmanager - then choosing the proceses tab - then terminating the process msblast.exe

This should give you back control of your system w/o it shutting off while you download the patch.

The manual steps for cleaning your system - as suggested by Network Associates are:

Manual Removal Instructions
To remove this virus "by hand", follow these steps:

1. Apply the MS03-026 patch http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp
2. Terminate the process msblast.exe
http://vil.nai.com/vil/systemhelpdocs/endtask.htm
3. Delete the msblast.exe file from your WINDOWS SYSTEM32 directory (typically c:\windows\system32 or c:\winnt\system32)
4. Edit the registry
http://vil.nai.com/vil/SystemHelpDocs/Regedit.htm
* Delete the "windows auto update" value from
o HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run

Also the worm is not spread by email. And systems on DSL or Cable which are on the internet all the time may be more likely to get it.

And now back to your regularly scheduled Endurance...

Mike





=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

http://www.endurance.net/ads/seabiscuit.html

Ridecamp is a service of Endurance Net, http://www.endurance.net.
Information, Policy, Disclaimer: http://www.endurance.net/Ridecamp
Subscribe/Unsubscribe http://www.endurance.net/ridecamp/logon.asp

Ride Long and Ride Safe!!

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=