msblaster

[steve]

have just reloaded and updated windows xp after crash.now
appear to have the hotfix kb823980 (associated with
blaster) all through my registry.It appears in the hkey
local machine\software\microsoft\updates\windows xp\sp2
folder the nt folder as suggested on the microsoft site
and the hkey users\s-1-5-21
\software\microsoft\windows\current
version\applets\regedit folder the removal tool says i am
not infected can i remove these safely from my computer

 

[Torgeir Bakken (MVP)]

have just reloaded and updated windows xp after crash.now
appear to have the hotfix kb823980 (associated with
blaster) all through my registry.It appears in the hkey
local machine\software\microsoft\updates\windows xp\sp2
folder the nt folder as suggested on the microsoft site
and the hkey users\s-1-5-21
\software\microsoft\windows\current
version\applets\regedit folder the removal tool says i am
not infected can i remove these safely from my computer

Hi

You do *not* want to remove 823980.

Actually, you should install this one:
http://support.microsoft.com/default.aspx?kbid=824146

It is a newer version of 823980 that fixes more vulnerabilities in the RPC
interface.

at the same time, you should install the following update as well:
http://www.microsoft.com/technet/security/bulletin/MS03-043.asp


If the updates have not caused any major issues on your computer, you can
remove the uninstall files and the Add/Remove programs entries by running the
program in this link:

Remove Hotfix Backup files and the Add/Remove Programs Registry Entries
http://www.dougknox.com/xp/utils/xp_hotfix_backup.htm

 

[Guest]

Hi

You do *not* want to remove 823980.

Actually, you should install this one:
http://support.microsoft.com/default.aspx?kbid=824146

It is a newer version of 823980 that fixes more vulnerabilities in the RPC
interface.

at the same time, you should install the following update as well:
http://www.microsoft.com/technet/security/bulletin/MS03- 043.asp


If the updates have not caused any major issues on your computer, you can
remove the uninstall files and the Add/Remove programs entries by running the
program in this link:

Remove Hotfix Backup files and the Add/Remove Programs Registry Entries
http://www.dougknox.com/xp/utils/xp_hotfix_backup.htm


--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter


.
thanks for that bit can i remove from the reistry all

references to mslaugh and teekids(identified as lovsan.a
and nachi)