Re: [Mu] Another silly virus?

From: Jeroen Nieuwenbroek (puch@zeelandnet.nl)
Date: Tue Sep 02 2003 - 20:12:41 CEST

  • Next message: Michele Andreoli: "Re: [Mu] Another silly virus?"

    It IS the blaster worm...

    When you get this message after 48 seconds your machine will shutdown.

    type at start / run "shutdown /a" this gives you time to fix the problem
    before your machine shutsdown.

    First remove the task from memory with CTRL ALT DEL an look for SVCHOST.EXE
    wich uses the most memory (28.000 kb in my case) and end the process.

    remove c:\windows\system32\blast32.exe or use the removal tool.

    After that, download the Microsoft security patch , do this else you still
    have a hole in your security..and the worm strikes your machine again.

    Good luck.

    Jurp Nieuwenbroek

    ----- Original Message -----
    From: "Nicolas BENOIT" <ndj55@free.fr>
    To: "Liste muLinux" <mulinux-forum@lists.sourceforge.net>
    Sent: Tuesday, September 02, 2003 7:23 PM
    Subject: Re: [Mu] Another silly virus?

    > Hi!
    >
    > I don't use WinXP, but this looks like the Win32.Blaster Worm...
    > You should download (for free) a blaster-remover from an antivirus
    > website...
    >
    > Regards,
    > Nicolas.
    >
    >
    > Michele Andreoli wrote :
    > > Hello, winXP experts! :-)
    > >
    > > These are the sympthoms: a little window appairs with the message
    > > "the system is being closed by NT authority/system" and a counter
    > > shutdown the machine in a minute.
    > >
    > > Somebody know this troian?
    > >
    > > Thank you.
    > > Michele
    > >
    >
    >
    > --
    > +-------------------------------+
    > | Nicolas BENOIT |
    > | http://nbenoit.tuxfamily.org |
    > | |
    > | .~. |
    > | /V\ Gnu - Linux |
    > | // \\ >Fear the Penguin< |
    > | /( )\ |
    > | ^^-^^ |
    > +-------------------------------+
    >
    >
    >
    > -------------------------------------------------------
    > This sf.net email is sponsored by:ThinkGeek
    > Welcome to geek heaven.
    > http://thinkgeek.com/sf
    > _______________________________________________
    > Mulinux-forum mailing list
    > Mulinux-forum@lists.sourceforge.net
    > https://lists.sourceforge.net/lists/listinfo/mulinux-forum
    >

    -------------------------------------------------------
    This sf.net email is sponsored by:ThinkGeek
    Welcome to geek heaven.
    http://thinkgeek.com/sf
    _______________________________________________
    Mulinux-forum mailing list
    Mulinux-forum@lists.sourceforge.net
    https://lists.sourceforge.net/lists/listinfo/mulinux-forum

  • Next message: Michele Andreoli: "Re: [Mu] Another silly virus?"

    This archive was generated by hypermail 2.1.6 : Tue Sep 02 2003 - 20:15:23 CEST