Forum Home
Press F1
 
Thread ID: 36548 2003-08-13 01:32:00 Where can I find the fix for the new worm? ambasluv (1414) Press F1
Post ID Timestamp Content User
167313 2003-08-13 14:10:00 So if I press and look for MSBLAST and don't have then I don't have the worm is this 100% frossy111 (4388)
167314 2003-08-13 22:00:00 > So if I press and look for MSBLAST and don't have then I don't have the worm is this 100%

I don't agree with that. A couple of people I have been trying to help get rid of this worm did not have the MBLAST.EXE in Task Manager nor did they find that key in their registry. The only thing that stopped the computer rebooting was the tool from Symantec but when they got online to try and download the patch they got hit with it again. A real vicious circle. :-(

Boy, have I had some fun trying to give a crash course (online) to non-computer literate people how to do all these things when they have never heard of Task Manager or the registry before.
Susan B (19)
167315 2003-08-13 22:53:00 > U could try chilling_silently's website, cos he's
> uploaded on to it.

:D

Im just making a HTML file this morning, and I think I'll throw some other Info on it up there, not to mention a virus removal tool

I know there's likely another hundred odd similar sites out there... With a similar purpose of assisting people in removing the worm, But why not add another local one ;-)
Chilling_Silently (228)
167316 2003-08-13 23:29:00 U could try chilling_silently's website

Showing my ignorance yet again - where????
Thanks
Scouse (83)
167317 2003-08-13 23:32:00 If you were doing all this online it is not surprising they were hit again.

You could email them the removal tool which is only small and they would only need to be online briefly to download their mail

After running the removal tool they should be able to download the patch, preferably from a local site they can get into quickly.
They would be very unlucky to be hit again in the time it takes to download the patch.

The other option is to go to a neighbour and download it to a floppy and there is no need to go online at all.
Jim B (153)
167318 2003-08-14 02:46:00 > U could try chilling_silently's website
>
> Showing my ignorance yet again - where????
> Thanks
>

Not a worries.. Its not like its sitting on the front page of the NewsPaper now is it ;-)

try:
http://www.rescueman.tk

See if that works :-)

Oh.. And spread the word ;-)
Chilling_Silently (228)
167319 2003-08-14 12:16:00 Seems ur gettin a lot of publicity from this C_S, ur gonna be goinf places :D vk_dre (195)
167320 2003-08-14 22:56:00 Be aware that there are now more variants on the loose.

Instead of "msblast.exe", it could be "penis32.exe" or "teekids.exe"

see details here (vil.nai.com)
KiwiTT (4082)
167321 2003-08-14 23:02:00 In addition there is another worm/virus making use of the same exploit in Windows RPC. See here (vil.nai.com) KiwiTT (4082)
1 2