msblast.exe

[Frank Klaas]

Greetings...recently noticed unusual internet traffic at
my home computer have ZoneAlarm, SpyBot. still I couldnot
find why so much traffic ....So....I bought a new hard
drive as a backup . when installing xp on new drive and
getting updates all 41 of then with much TROUBLE what a
pain why doesn't Bill put that on a cd and distrubute???

Anyway...when all done I noticed a program wanting to
access the internet MSBLAST.EXE well what is it...is this
the BLASTER virus or what and how did I get it just
trying to get the updates from MICROSOFT!!!!

 

[Kelly]

Hi Frank,

This script removes all variants of the W32.Blaster.Worm (original, b, c, d
and e) and will inform you whether or not the patch is already installed.
http://www.kellys-korner-xp.com/xp_tweaks.htm. Direct download:
http://www.kellys-korner-xp.com/regs_edits/msblast.vbs

More information here:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

Other than that run the small utility on line 261 and post the log file
here:
http://www.kellys-korner-xp.com/xp_tweaks.htm
/top10faqs.htm

 

[Jim]

-----Original Message-----
Greetings...recently noticed unusual internet traffic at
my home computer have ZoneAlarm, SpyBot. still I couldnot
find why so much traffic ....So....I bought a new hard
drive as a backup . when installing xp on new drive and
getting updates all 41 of then with much TROUBLE what a
pain why doesn't Bill put that on a cd and distrubute???

Anyway...when all done I noticed a program wanting to
access the internet MSBLAST.EXE well what is it...is this
the BLASTER virus or what and how did I get it just
trying to get the updates from MICROSOFT!!!!
.
Yes that is the blaster worm, check this site here for

help; http://www.microsoft.com/technet/treeview/?
url=/technet/security/bulletin/MS03-026.asp and here;
http://securityresponse.symantec.com/avcenter/venc/data/w32
..blaster.worm.html and;
http://www.microsoft.com/security/incident/blast.asp

 

[Gregg]

Did you have a firewall installed BEFORE you connected to the Internet to
get Bill's patches? If not, that is why you got infected...you put an
unprotected system onto the Internet. It only takes a few minutes (or less)
to get popped by Blaster.