Have the Microsoft worm - Democratic Underground

Rowdyboy

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-12-03 05:20 PM
Original message

Have the Microsoft worm

can stay logged on no more than one to 3 minutes before autmatic shutoff.
Any suggestions?

Would the "patch" help at this stage?

Help!!!

Printer Friendly | Permalink | | Top

Runesong

(219 posts) Send PM | Profile | Ignore

Tue Aug-12-03 05:30 PM
Response to Original message

1. Quick fix

Edited on Tue Aug-12-03 05:33 PM by Runesong

I had a customer in my shop today with that virus. Here's what I did.

Click start-->accessories-->Command Prompt.

Type:

cd \windows\system32

rename msblast.exe msblast.biteme

regedit

*** the registry editor will pop up ***

Seek and destroy the following registry key

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\windows auto update=msblast.exe

Restart your system and that should do it.

Make sure you run live-update on your virus scanner, and MS Windows Update afterwards to protect against future infections.

Printer Friendly | Permalink | | Top

Rick Myers

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-12-03 05:32 PM
Response to Reply #1

2. Use regedit with care!

Printer Friendly | Permalink | | Top

Runesong

(219 posts) Send PM | Profile | Ignore

Tue Aug-12-03 05:34 PM
Response to Reply #2

3. True.

But it still needs to be done.

I beleive you can use the safer MSCONFIG, and eliminate it from the start-up section, but I haven't tried it yet.

Printer Friendly | Permalink | | Top

graywarrior

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-12-03 05:36 PM
Response to Reply #2

4. Just spent 2 hours with Maxanne

solving the same thing.
To stay on line for longer than 3 minutes:
While you a waiting for your computer to reboot(with that aggravating little message counting down) go to your Start button, then to Run. Type in command. Enter. At prompt, type shutdown(sp(-a
enter again.
That should keep you up long enough to download.

Printer Friendly | Permalink | | Top

Jackpine Radical

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-12-03 05:53 PM
Response to Original message

5. I got it too & ran Norton.

Norton already has a worm cleaner up on their site, which I got to via their antivirus SW.
Then the patch, which Norton also provided a link for. Crossing my fingers...so far it was easy.

Printer Friendly | Permalink | | Top

geniph

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-12-03 06:16 PM
Response to Original message

6. Use the removal tool

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

Printer Friendly | Permalink | | Top

Rowdyboy

(1000+ posts) Send PM | Profile | Ignore

Tue Aug-12-03 11:04 PM
Response to Original message

7. Thank all you guys so much....

I'll start fresh tomorrow-but you have given me hope...

Printer Friendly | Permalink | | Top

noiretextatique

(1000+ posts) Send PM | Profile | Ignore

Wed Aug-13-03 12:27 AM
Response to Original message

8. i had it!

maybe this was the source of my recent problems. free avg by grisoft detected and fixed it ust fine.

Printer Friendly | Permalink | | Top

bearfartinthewoods

(1000+ posts) Send PM | Profile | Ignore

Wed Aug-13-03 06:22 PM
Response to Original message

9. all i needed to get dewormed, i found in this thread...THANKS

wouldn't you know my virus and firewall trial period ended 8/13.
by the time i got to the update site, i was already infected.

thanks again for the info and links.

Printer Friendly | Permalink | | Top

DU AdBot (1000+ posts)

Fri May 03rd 2024, 04:29 AM
Response to Original message

Advertisements [?]

Top

Powered by DCForum+ Version 1.1 Copyright 1997-2002 DCScripts.com
Software has been extensively modified by the DU administrators

Important Notices: By participating on this discussion board, visitors agree to abide by the rules outlined on our Rules page. Messages posted on the Democratic Underground Discussion Forums are the opinions of the individuals who post them, and do not necessarily represent the opinions of Democratic Underground, LLC.