MSBlast.exe

[AznRocky]

wait so what does the worm actually do..........

[EnJoi]

restart ur comp

[Stonecoldfreak1]

Originally posted by AznRocky@12 August 2003 - 00:22
wait so what does the worm actually do..........

its been restarting my computer like a minute after i log on... i get a win32 error then it says you have 1 min till your system is restarted

[Icey]

this is happning to sooo many ppl.. every make sure ur firewall, anti-virus and windows is upto date!

[EnJoi]

its like the T3 virus what in the hell did u guys all download?

[AznRocky]

yeah thats the problem i dont know what i downlaoded and my PC Cillin cant read it maby i should actually buy a Virus Scanner does anybody know a good UPDATED Virus scanner i can downlaod from scanner?

[iMartin]

From Mess.be:

Security threat: beware MsBlast.exe

dwergs says:

D'z warned me about a hole in the MSN Messenger protocol that has lately been taken advantage of. It's the first thing I hear about it, but according to him "several people have already been hit by exploiters, gaining too much access".

To find out whether you're infected, press Ctrl+Alt+Del and verify if the process 'MsBlast.exe' is running. If it is, consider following the instructions below, but since there is no official security bulletin released on this topic yet... you are on your own.

- Kill the process MsBlast.exe from the task manager you just checked.
- Next, execute regedit.exe and search for the registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Windows Auto Update

If it mentions MSBLAST in the path, remove that.

- Final step: delete msblast.exe from either the windows system or and system32 folders.

More on this as the story unfolds...

[Storm]

well this fucker spreads mega fast............... i think its via KaZaA as well, though thats just a guess.........

i had it to, and i hope i dint spread it out 2 much......... newayz, like said b4 and cannot be stressed enough: UPDATE ur AV!!!!

i had updated mine 4 days ago, and i still got it............. and im updating regularly............

u can fix it by the means mentioned above, or dl a patch (from m$ unfortunatly, so itll prolly mess up sumthing else) (thnx 2 MetroStars).......

when u dl this, make sure u SAVE it and dont open it.......... since your comp will restart every couple of mins.

once downloaded, reboot and upon rebooting, press F8 and let win boot in safe mode, without the posibility to connect to the internet!!! this will give u the time u need to install the patch, since the worm cant dl the msblast file.......

once installed, reboot, and ur homefree..................

[Icey]

i dunno how this is spreading.. so many ppl got it at the same time

[callum]

Originally posted by AznRocky@12 August 2003 - 01:18
ok i got this folder and its titled $NtUninstallKB823980$ and i'm not sure i should delete it or is hould just leave it alone it has some files that i' not sure i should keep!

That's the fix metrostars suggested.

http://microsoft.com/technet/treeview/defa...in/MS03-026.asp