Follow this:
DISCONNECT the subject computer from any network IMMEDIATELY.
Install or enable a firewall IMMEDIATELY:
http://support.microsoft.com/?kbid=283673
VERY IMPORTANT to follow ALL steps, closing ports or installing the
patch is NOT enough.
Download the appropriate patch referenced in Ron Martells article
below.
You may need to do this at an uninfected computer and burn to CD or
save on floppy.
This is the IMPORTANT fix by Ron Martell:
http://www.bigblackglasses.com/Article.aspx?Article=342
Also see:
http://isc.sans.org/diary.html?date=2003-08-11
After this is resolved prevent similar occurrences by installing ALL
Critical Updates from Windows Update.
Keep antivirus up to date and run at least weekly.
Install or enable a firewall.
--
Jupiter Jones [MVP]
An easier way to read newsgroup messages:
http://www.microsoft.com/windowsxp/p...oups/setup.asp
http://dts-l.org/index.html
"stuL" <(E-Mail Removed)> wrote in message
news:11a701c36135$96d135c0$(E-Mail Removed)...
> have patched & tried to purge worm from system using
> Norton System's FixBlast Download. It starts to purge but
> then aborts. Has anyone experienced this and found an
> answer. Also, have searched my files and and found one
> file as follows: C:\Windows\Prefetch\msblast.exe-
> 09ff84f2.pf Now what!???