Home | Community | Message Board


World Seed Supply
Please support our sponsors.

General Interest >> Science and Technology

Welcome to the Shroomery Message Board! You are experiencing a small sample of what the site has to offer. Please login or register to post messages and view our exclusive members-only content. You'll gain access to additional forums, file attachments, board customizations, encrypted private messages, and much more!

Jump to first unread post. Pages: 1
Anonymous

sooo how do I get rid of msblaster??
    #1808162 - 08/13/03 03:19 AM (14 years, 8 months ago)

I picked up this worm just from surfing the internet. I guess I thought I would never get it cause I didn't install the security patch till after I got it. When you try to delete it it won't let you, so I just renamed it and moved it to another folder, but I'm not sure that will even help. What can I do?


Post Extras: Print Post  Remind Me! Notify Moderator
Invisibledaussaulit
Forgetful

Registered: 08/06/02
Posts: 2,894
Loc: Earth
Re: sooo how do I get rid of msblaster?? [Re: ]
    #1808173 - 08/13/03 03:29 AM (14 years, 8 months ago)

If you get a that message pops up telling you that the remote procedure
call service has failed and that my computer will reboot in one minute,
then you probably have W32.Blaster.Worm
Here's information and removal tools if you have the worm:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
If you don't have the worm, protect yourself with this patch.
http://www.microsoft.com/technet/security/bulletin/MS03-026.asp?frame=true


Post Extras: Print Post  Remind Me! Notify Moderator
Anonymous

Re: sooo how do I get rid of msblaster?? [Re: daussaulit]
    #1808177 - 08/13/03 03:31 AM (14 years, 8 months ago)

Thanks... I was actually just reading the thread about it in OTD. All I had to do was open up task manager and hit End Process so I could delete it.


Post Extras: Print Post  Remind Me! Notify Moderator
Invisibledaussaulit
Forgetful

Registered: 08/06/02
Posts: 2,894
Loc: Earth
Re: sooo how do I get rid of msblaster?? [Re: ]
    #1808183 - 08/13/03 03:33 AM (14 years, 8 months ago)

its a little more complicated than that. If you got it once, you can get it again. Removing it from the registry, and then changing the process procedures so it won't shut down your computer.


Post Extras: Print Post  Remind Me! Notify Moderator
InvisibleSHiZNO
-

Registered: 03/14/03
Posts: 1,467
Re: sooo how do I get rid of msblaster?? [Re: daussaulit]
    #1808355 - 08/13/03 05:44 AM (14 years, 8 months ago)

type 'shutdown -a' at a command prompt, or the run dialog box, to halt the shutdown proccess, or itll probably shutdown before you can install the patch :wink:


--------------------
...


Post Extras: Print Post  Remind Me! Notify Moderator
Anonymous

Re: sooo how do I get rid of msblaster?? [Re: SHiZNO]
    #1809422 - 08/13/03 03:03 PM (14 years, 8 months ago)

how do u know if u have this worm? is there like a test u can run


Post Extras: Print Post  Remind Me! Notify Moderator
Anonymous

Re: sooo how do I get rid of msblaster?? [Re: ]
    #1810140 - 08/13/03 05:57 PM (14 years, 8 months ago)

Look in your \windows\system32\ directory, it puts itself there as a file called msblaster.exe.


Post Extras: Print Post  Remind Me! Notify Moderator
Anonymous

Re: sooo how do I get rid of msblaster?? [Re: ]
    #1811034 - 08/13/03 09:41 PM (14 years, 8 months ago)

thanks, i dont have it :smile:


Post Extras: Print Post  Remind Me! Notify Moderator
OfflineEarth_Droid
Stranger
Registered: 04/19/02
Posts: 5,240
Last seen: 11 years, 8 months
Re: sooo how do I get rid of msblaster?? [Re: ]
    #1811040 - 08/13/03 09:43 PM (14 years, 8 months ago)

lol, I just got the same one. I ran a system restore before I knew it was a virus. I just removed the virus completely now though.


Post Extras: Print Post  Remind Me! Notify Moderator
InvisibleJellric
altered statesman

Registered: 11/08/98
Posts: 2,261
Loc: non-local
Re: sooo how do I get rid of msblaster?? [Re: ]
    #1814382 - 08/14/03 06:46 PM (14 years, 8 months ago)

I learned today I have it and I removed it manually by stopping its process as you mentioned, then deleting the registry key it created to enable it to start itself when your windows starts, then I deleted the msblast.exe file which was in my WINNT/system32 folder. Finally I downloaded the patch from microsoft. com. BTW, did anyone notice that the microsoft site didn't give the full text of the message included in the worm? It had a little dig at Bill Gates.

I'm glad this thing is gone. Was wondering why I couldn't copy and paste sometimes when here on the Shroomery and certain links were no longer clickable.



--------------------
I AM what Willis was talkin' bout.


Post Extras: Print Post  Remind Me! Notify Moderator
InvisibleJellric
altered statesman

Registered: 11/08/98
Posts: 2,261
Loc: non-local
Re: sooo how do I get rid of msblaster?? [Re: Jellric]
    #1814444 - 08/14/03 07:06 PM (14 years, 8 months ago)

What the hell? The damn thing is back!! I deleted it and applied the patch, restarted my computer. I thought the patch would prevent a reoccurance. Do I have to close the ports it's operating through or what?


--------------------
I AM what Willis was talkin' bout.


Post Extras: Print Post  Remind Me! Notify Moderator
Invisibledaussaulit
Forgetful

Registered: 08/06/02
Posts: 2,894
Loc: Earth
Re: sooo how do I get rid of msblaster?? [Re: Jellric]
    #1814860 - 08/14/03 09:03 PM (14 years, 8 months ago)

did you follow the instructions at the symantec link I posted earlier? It worked for me, and hasn't come back.


Post Extras: Print Post  Remind Me! Notify Moderator
InvisibleJellric
altered statesman

Registered: 11/08/98
Posts: 2,261
Loc: non-local
Re: sooo how do I get rid of msblaster?? [Re: daussaulit]
    #1814938 - 08/14/03 09:24 PM (14 years, 8 months ago)

Yes, I followed them carefully. I restarted my computer again, and maybe I didn't restart after applying the patch. I thought I did, but maybe not. Anyway, it's gone, and I also installed a freeware firewall program that I used to use called Sygate Personal Firewall.


--------------------
I AM what Willis was talkin' bout.


Post Extras: Print Post  Remind Me! Notify Moderator
OfflineEarth_Droid
Stranger
Registered: 04/19/02
Posts: 5,240
Last seen: 11 years, 8 months
Re: sooo how do I get rid of msblaster?? [Re: Jellric]
    #1814946 - 08/14/03 09:26 PM (14 years, 8 months ago)

You have to apply the patch first. Just run the removal program again, I am sure it will be fine.


Post Extras: Print Post  Remind Me! Notify Moderator
Offlineriffic
Male
Registered: 09/12/02
Posts: 99
Last seen: 4 years, 1 month
Re: sooo how do I get rid of msblaster?? [Re: Earth_Droid]
    #1815294 - 08/14/03 11:25 PM (14 years, 8 months ago)

your system has been root-level compromised. from a security standpoint, you really should format your drives and install from clean media, backing up any non-executables while you can.

be sure to read my thread in the security and safety forum while you can. it got a little heated but I still stand by my comments.


Post Extras: Print Post  Remind Me! Notify Moderator
Jump to top. Pages: 1

General Interest >> Science and Technology

Similar ThreadsPosterViewsRepliesLast post
* How to install a different version of windows Oatman2000 1,067 13 09/22/06 02:58 PM
by outerwave
* Websites installing things on your comp Sheepish 892 13 07/26/03 03:19 AM
by Murex
* Help me install folding at home at my local library OJK 765 5 02/10/06 01:34 AM
by Ythan
* XP Stalling/restarting often - Please help headset 1,128 13 01/14/05 07:03 PM
by baraka
* Backup image of fresh XP install
( 1 2 all )
DieCommie 1,768 20 03/15/08 04:10 PM
by DieCommie
* wtf i cant get ubuntu to install
Psychoslut
1,007 13 12/13/07 05:12 PM
by sherm
* failed xp install boots up on vista grassman 717 4 05/14/08 08:02 PM
by cleverwise
* Installing Mac OS X 10.5 without a disk daytripper05 728 3 06/24/08 06:00 PM
by Seuss

Extra information
You cannot start new topics / You cannot reply to topics
HTML is disabled / BBCode is enabled
Moderator: Lana, trendal, automan
815 topic views. 0 members, 1 guests and 0 web crawlers are browsing this forum.
[ Toggle Favorite | Print Topic | Stats ]
Search this thread:
MRCA Tyroler Gluckspilze
Please support our sponsors.

Copyright 1997-2018 Mind Media. Some rights reserved.

Generated in 0.034 seconds spending 0.009 seconds on 19 queries.