re: THAT IS A VIRUS!!!It is a new one, just discovered today
Wednesday, August 13, 2003 at 6:09 am Windows XP Annoyances Discussion Forum
Posted by Zaven
(2 messages posted)
Hi guys. Yesterday I found that it's a new worm (W32.Blast.Worm),
downloaded the patches for win2k and winXP and fixblaster.exe from symantec. I had
2 infected PCs: first with win2k SP3 installed and the second winXP SP1 installed.
The worm was found and removed from both PC-s. The patches were installed. Then I
reinstalled the Norton AntyVirus 2003 and updated them (The i32 Intelligent Updater
package - 20030811-019-i32.exe)
Today I found that the win2k is normal, but winXP was infected again (the
same sitation: the Remote Procedure Call service is stopped and in registry "windows
auto update"="msblast.exe" value exists in key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Please help me....
On Monday, August 11, 2003 at 7:56 pm, Mobile PC Doctor wrote:
>I'm going to guess that the messege you get on the box with the countdown says:"Windows
>must now restart because Remote Procedure Call Service terminated unexpectadly"?
>You need to check your PC for a file called msblast.exe , or anything with msblast
>in the name.It sends a messege out to whoever each time you boot up that your pc
>is on and it can crash your PC. You need to go to http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html
> and read it very carefully, because the worm may attempt to keep you from getting
>the patch needed from windowsliveupdate.com We were having the exact same problem
>as you, and now it has stopped after doing the fix, and yes, it goes right past
your
>firewall.
>
>
|
All messages in this thread [show all]
 |  |  |  |  |  | re: THAT IS A VIRUS!!!It is a new one, just discovered today (Zaven: Wed, Aug 13, 2003, 6:09 am) |
 |  | Fixed. (Viper X: Tue, Aug 5, 2003, 7:02 am) |
 |  |  | re: Fixed. (R Criddle: Tue, Aug 5, 2003, 10:25 am) |
 |  |  |  |  | um yea (Dan: Mon, Aug 11, 2003, 11:11 am) |
 |  |  |  |  |  |  | re: um yea (FlipCyde: Mon, Aug 11, 2003, 11:43 am) |
 |  |  |  |  |  |  | re: um yea (charlieclaw: Mon, Aug 11, 2003, 11:44 am) |
 |  |  |  |  |  |  |  |  |  | me too (cfc: Wed, Aug 13, 2003, 3:46 am) |
 |  |  |  | re: Fixed. (Ken Hamner: Mon, Aug 11, 2003, 1:14 pm) |
| |
| |
| |
Return to the Windows XP Discussion Forum
|
|