hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

Full Version: Msblast.exe Worm Help
rinse
The virus only affects users running,Microsoft Windows NTŪ 4.0
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows ServerT 2003


ok this little bugger is quite easy to remove first of all heres the symptoms....

wen u connect to the net a pop up displays saying your pc will shut down in 60 seconds.

wen u press ctrl+alt+del in the processess section u see a task called MSBLAST.EXE.

STEPS TO REMOVAL

1:to remove it get access to a pc that does not have the virus download this patchon to a floppy disk.

2:Go on the affected pc (DONT CONNECT TO THE NET)press control alt del end the process msblast.exe
3:Go on the affected pc (DONT CONNECT TO THE NET) use the search function and search for msblat.exe.

4:Delete any search results found for msblast.exe

5:install the patch you downloaded on the floppy disk

6:SUCCESS YOU CAN NOT CATCH THE VIRUS AGAIN AND ITS GONE
ComSec
thanks for the removal details...you might also be interested in the MSBlast copycat i just posted...it seems it now has a new exe name....called TEEKIDS.EXE

cheers
netcomm
there is a much easier way of going about it..

1.Connect to the internet
2.wait for the shutdown windows to come up.
3,goto cmd and type shutdown -a
4.Get The Patch
5. Get The Removal Tool

Done.

rinse you way works nut it doesnt remove the registry entry that the worm make.
also it doesnt fix windows autoupdater.

Peace
NetComm
320X
The winnt also ?
ind0r
on google you can find a lot of good tool to delete msblast but in my opinion the best is:
1.when you see "60 sec." then Menu start>Run>shutdown -a
2.download patch (www.lsd-pl.net/special.html)
3.disconnect
4.install patch
5.Ctl+Alt+del. find msblast.exe and kill
6.Menu start>run>%systemroot%
7.del msblast.exe
8.reboot


;-) good luck
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.