HELP..!!!!!

[george]

hi.. i've downloaded this patch from KazaA.. and it was
no use to me so i deleted it(FULLY delete-"SHIFT+DEL",
NOT into recycle bin)..but everytime i restart my comp,
the patch reappears.. it seems weird to me.. so i deleted
it agian.. and did the same thing over and over...

it doesn't seem to go away..

what is the patch?? (e.g worm?? or virus??)

WHAT DO I HAVE TO DO, TO GET RID OF THAT ANNOYING PATCH??


any help would be greatly appreciated.. thankz.. =)

 

[Will Denny]

Hi

If it was downloaded via Kazaa the 'patch' could be anything. Can you remember why you downloaded it? Have a look in msconfig>startup to see if there is any reference to that 'patch' - if so uncheck it. Next, to make your system safe again - uninstall Kazaa - it can download files that you don't won't downloaded and put your whole system at risk.

Will

 

[Nicholas]

George --

Step #1

The first thing you should do is enable Windows XP's built-in Firewall:

1. In Control Panel, double-click Networking and Internet Connections, and
then click Network Connections.
2. Right-click the connection on which you would like to enable ICF, and
then click Properties.
3. On the Advanced tab, click the box to select the option to Protect my
computer or network.

Step #2:

Visit http://www.dougknox.com/xp/scripts_desc/xp_msblast.htm and follow
the instructions.

[Courtesy of MS-MVPs Doug Knox, Kelly Theriot, and Mike Koliz]

Step #3:

Download and install the following:

Blaster Worm: Critical Security Patch for Windows XP (32-bit version)
http://microsoft.com/downloads/deta...6C-C5B6-44AC-9532-3DE40F69C074&displaylang=en


--
Nicholas

------------------------------------------------------------------------------------------


| hi.. i've downloaded this patch from KazaA.. and it was
| no use to me so i deleted it(FULLY delete-"SHIFT+DEL",
| NOT into recycle bin)..but everytime i restart my comp,
| the patch reappears.. it seems weird to me.. so i deleted
| it agian.. and did the same thing over and over...
|
| it doesn't seem to go away..
|
| what is the patch?? (e.g worm?? or virus??)
|
| WHAT DO I HAVE TO DO, TO GET RID OF THAT ANNOYING PATCH??
|
|
| any help would be greatly appreciated.. thankz.. =)

 

[george]

Hi Will,

ermm.. yer, i remember scanning it ages ago, and Norton
Anti-virus said it was a 'worm'..

i've also went through the "msconfig>startup".. but i
can't seem to find its name on the "startup" thingy..

i remember downloading it as a "no-cd crack" to this game.

anyways, this patch doesn't seem to harm my comp. but its
really annoying..coz i have to delete it everytime i
start my comp...

is there a way to get rid of it??!
please help me... thankz

george.

-----Original Message-----
Hi

If it was downloaded via Kazaa the 'patch' could be

anything. Can you remember why you downloaded it? Have
a look in msconfig>startup to see if there is any
reference to that 'patch' - if so uncheck it. Next, to
make your system safe again - uninstall Kazaa - it can
download files that you don't won't downloaded and put
your whole system at risk.

 

[george]

ermm.. i've tried deleting the file via Norton.. all it
says "access denied" or something like like that..

and whats this searching on 'loader.exe'?? what does it
hav to do wif the 'patch'???

and how do i get to 'Registery/search'?? (sorry.. iam not
really tat gud in comp.. =P

ermm.. yer.. reply asap... thankz Will.. greatly
appreciated..

-----Original Message-----
Hi George

Does Norton still show it as a Worm - if so you ought to

try and get rid of it via Norton. On the off-chance, try
a search in Windows Explorer for 'loader.exe' - without
the quotes. Try the same search in the Registry as
well. If you find any instances in WE delete them to the
Recycle Bin. If you find any instances in the Registry,
back up your Registry 1st - then delete them. You can
back up your Registry with a program called Erunt:

 

[george]

hey Will.. i've found the 'Registery Editor'
issert : 1-Run
2-regedit
3-search

well.. i've found the file u said.. 'loader.exe'..
but i still dun understand what that file gotta do with
the worm (patch) i got... *confused.. =|

btw..u got ICQ?? if u do..gimme ur contact yer?? more
easier to talk tat way..kekke..

thankz..

-----Original Message-----
Hi George

Does Norton still show it as a Worm - if so you ought to

try and get rid of it via Norton. On the off-chance, try
a search in Windows Explorer for 'loader.exe' - without
the quotes. Try the same search in the Registry as
well. If you find any instances in WE delete them to the
Recycle Bin. If you find any instances in the Registry,
back up your Registry 1st - then delete them. You can
back up your Registry with a program called Erunt:

 

[Will Denny]

Hi George

Some files called 'no-cd crack' are in fact 'loader' files which are a nuisance and can cause all kinds of problems. It was just a thought...

To open the Registry - Start>Run - and then type in "regedit" - without the quotes. Go to Edit>Find - if you do find any references to loader, please post back before you do anything else.

Will

 

[Will Denny]

BTW - if you have got the RPC problem the following link will help you:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc

Courtesy of MVP Kelly Theriot.

Will

 

[george]

ohhHHh..now i get it..thanks for the
explaination..hhehehe..

ermmm..well, i've found the file u said on the 'Registry
Edit'..--> 'loader.exe'..

so wat do i do now??
juz delete the 'loader.exe' file???

btw..u got ICQ?? if u do..gimme ur contact yer?? more
easier to talk tat way..kekeke..

thankz..

-----Original Message-----
Hi George

Some files called 'no-cd crack' are in fact 'loader'

files which are a nuisance and can cause all kinds of
problems. It was just a thought...

To open the Registry - Start>Run - and then type

in "regedit" - without the quotes. Go to Edit>Find - if
you do find any references to loader, please post back
before you do anything else.

 

[Will Denny]

Hi George

No, don't just delete it. Highlight the entry for 'loader.exe' - in the right hand pane I expect - and then go to File>Export. Make sure that 'Selected Branch' is enabled and then save that key to your hard disk/partition/floppy - so that you can access it again - just in case... You can then right click on that key - and only that key - and select 'Delete'.

Will

 

[SunSpot]

That would work if he had blaster, but it's worthless with any other worm.

George --

Step #1

The first thing you should do is enable Windows XP's built-in Firewall:

1. In Control Panel, double-click Networking and Internet Connections, and
then click Network Connections.
2. Right-click the connection on which you would like to enable ICF, and
then click Properties.
3. On the Advanced tab, click the box to select the option to Protect my
computer or network.

Step #2:

Visit http://www.dougknox.com/xp/scripts_desc/xp_msblast.htm and follow
the instructions.

[Courtesy of MS-MVPs Doug Knox, Kelly Theriot, and Mike Koliz]

Step #3:

Download and install the following:

Blaster Worm: Critical Security Patch for Windows XP (32-bit version)
http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532
-3DE40F69C074&displaylang=en


--
Nicholas

----------------------------------------------------------------------------
--------------


| hi.. i've downloaded this patch from KazaA.. and it was
| no use to me so i deleted it(FULLY delete-"SHIFT+DEL",
| NOT into recycle bin)..but everytime i restart my comp,
| the patch reappears.. it seems weird to me.. so i deleted
| it agian.. and did the same thing over and over...
|
| it doesn't seem to go away..
|
| what is the patch?? (e.g worm?? or virus??)
|
| WHAT DO I HAVE TO DO, TO GET RID OF THAT ANNOYING PATCH??
|
|
| any help would be greatly appreciated.. thankz.. =)

 

[Will Denny]

Reboot and see if you still get the same problem. If you do, we'll have to think again.

Will

 

[Will Denny]

Hi George

Did you try a search in Windows Explorer for 'no-cd*' and 'loader.exe' - both without the quotes? If not, try that and delete any files you find to the Recycle Bin. There's not more than one reference to loader.exe in the Registry is there? If so, Export that/those as well. If you find that file in the Registry in the same place again, it must be loading itself from somewhere at startup. Have a look in the win.ini file under 'run=':

Start>Run - then type in "win.ini" - without the quotes. If you find any entries in either the 'run=' or 'load=' lines, could please post back what is there.

Will