MSblaster worm

  • Thread starter Thread starter Donna
  • Start date Start date
D

Donna

I recently picked up the msblater worm I did every thing
to get rid of it my question is the anti virus told me to
delete the file it was in(C;\windows\system 32\TFTP1040
do I need this file what is it and how do I reload it if I
need it?
 
-----Original Message-----
This file is probably generated by the worm and you can delete it.

--
Kenrick Fu
MS MVP (IE/OE)
Thank you one more question the anti virus said if I delete it I have to reload it?




.
Click to expand...
 
To stop the reboots: Go to Start/Run and type in: services.msc. Scroll down
to Remote Procedure Call (RPC)/Logon/First Failure/Restart the Service.

Then close Windows Explorer, End Process in the Task Manager for
msblast.exe, run the edit on line 257 then run the patch listed below it:
http://www.kellys-korner-xp.com/xp_tweaks.htm

Windows XP Security Patch: Buffer Overrun In RPC Interface Could Allow Code
Execution: http://tinyurl.com/ir5h

More information here:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc


/xp_tweaks.htm

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm
 
Back
Top