Security Basics mailing list archives
RE: Purging Blaster.worm
From: "Preston, Tony" <Tony.Preston () acs-inc com>
Date: Wed, 13 Aug 2003 15:27:16 -0400
I manually got rid of it on my work PC with the following steps: 1) kill msblast.exe process 2) delete msblast.exe from windows/system32 3) delete msblast.exe*.pf from windows/prefetch 4) delete all registry keys with msblast in them 5) The patch from Microsoft was applied, but the next day I was re-infected after doing steps 1, 2, and 4. I repeated these steps today after adding #3 and it is not back (althought my firewall blocks port 135 hits trying to re-infect). -----Original Message----- From: Jose Guevarra To: security-basics () securityfocus com Sent: 8/12/2003 8:06 PM Subject: Purging Blaster.worm Hi, Has anyone successfully purged the MSBlaster worm. There is a tool out there that can do it but is it reliable? thanx, ============ ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ ---- --------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- Re: Ethics Question, (continued)
- Re: Ethics Question Adam Newhard (Aug 21)
- Re: Ethics Question Suzanne Rodday (Aug 21)
- Re: Ethics Question Sebastian Schneider (Aug 22)
- Re: Ethics Question Michael Thornhill (Aug 21)
- Re: Ethics Question Schneider Sebastian (Aug 21)
- Re: Ethics Question Paul Ledin (Aug 22)
- Re: Purging Blaster.worm Ansgar Wiechers (Aug 16)
- RE: Purging Blaster.worm Rory (Aug 13)
- RE: Purging Blaster.worm David Gillett (Aug 16)