[thelist] The New Worm - need some help to clean it

[Anthony Baratta]

At 07:33 PM 8/11/2003, patrick wrote:
>tom,
>also hunt up the registry:
>1) Delete msblast.exe (usually found at: winnt\system32\msblast.exe)
>2) delete the Registry key: 
>"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\windows 
>auto update" . That key should contain the "msblast.exe" process, and is 
>what starts it up again on reboot.

I second this approach, only do it within "Safe Mode".

---
Anthony Baratta
President
Keyboard Jockeys

"Conformity is the refuge of the unimaginative."