--- patrick <pms at stoutstreet.com> wrote: > tom, > also hunt up the registry: > 1) Delete msblast.exe (usually found at:winnt\system32\msblast.exe) > 2) delete the Registry key: > "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\windows auto update" . That key should contain the "msblast.exe" process, and is what starts it up again on reboot. Thanks Patrick. Symantec finally has a detailed page for removing this thing, posted at: <http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html#removalinstructions> (watch the wrap) I guess the official name is now w32.blaster.worm. Deleteing that registry key is probably the most important thing too, I'd guess. HTH Tom ===== http://www.pixelmech.com/ :: Web Development Services http://www.DMXzone.com/ :: Premium Content Author / JavaScript / Every Friday! http://www.maccaws.com/ :: Group Leader [Making A Commercial Case for Adopting Web Standards] "That's not art, that's just annoying." -- Squidward