[thelist] The New Worm - need some help to clean it [instructions posted]

Tom Dell'Aringa pixelmech at yahoo.com
Mon Aug 11 21:56:20 CDT 2003


--- patrick <pms at stoutstreet.com> wrote:
> tom,
> also hunt up the registry:
> 1) Delete msblast.exe (usually found at:winnt\system32\msblast.exe)
> 2) delete the Registry key: 
>
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\windows
auto update" . That key should contain the "msblast.exe" process, and
is what starts it up again on reboot.

Thanks Patrick. Symantec finally has a detailed page for removing
this thing, posted at:

<http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html#removalinstructions>

(watch the wrap) I guess the official name is now w32.blaster.worm.
Deleteing that registry key is probably the most important thing too,
I'd guess. 

HTH

Tom


=====
http://www.pixelmech.com/ :: Web Development Services
http://www.DMXzone.com/ :: Premium Content Author / JavaScript / Every Friday!
http://www.maccaws.com/ :: Group Leader
[Making A Commercial Case for Adopting Web Standards]

"That's not art, that's just annoying." -- Squidward


More information about the thelist mailing list