Toolkit
Story: Cleaning up after the MSBlast worm
Posted by: Ryan Stephen (Sunday 17 August 2003, 1:09 PM)
Possible that there exists more than one variety of msblast? As in lookalikes that have been produced after the introduction of the first?
On the 10th I was infected by msblast, supposedly before Microsoft began investigating the problem. ... On this occurance I mannaged mearly to remove it via recovery console. (wasn't aware the means of distribution as there wasn't documentation of the virus that I saw on Norton's site as of yet, so, of course left my system at bay having the needed ports for infection open).. Suprisingly, my system was kept clean the next two days, after which .... Access violation, SVCHOST, shi.... Looked in taskmannager, no occurance of msblast, looked in system folder, and, of course, there it was again... (potentially not the same as last given I didn't think to run a file check).
Alright, so this time I downloaded Norton's fixblast utility, launched it, let it scan, and it reported msblast removed. Rebooted my machine and figured that I could finally get back to work on a project in Visual Studios when "Access violation in SVCHOST"... Rebooted again, did nothing, and the same occured yet again followed by a blue screen of death. The only config alteration that msblast is supposed to make is a reg alteration to start itself, right? So... Does this appear that my system has been tampered with by someone after the infection? Or... Has anyone else encountered this problem? Want to know before I take the effort to format & reinstall a load of SDK's.
Full Talkback thread
Story: Cleaning up after the MSBlast worm
-
This is not true as the MSBlast virus has also inf... Anonymous -
Deleting the file msblast.exe file from the System... Mick Slater
-
your system should be fine if you disconnect from... Anonymous
-
Has anyone ever looked at how many patches that ar... Duncan Fiander
-
Dear guy,
Your solution is not very smart! You rec... Anonymous
-
Hi, i have been infected by this worm, and i have... Anonymous
-
it has also affected windows ME too kevin
-
PG,
I hadn't bothered to check the numerous helpfu... Jake Owsley
-
Very helpful article and very precise. One comment... John Singh
-
The solution offered did not worked, at least in m... Malkit Singh Bhasin
-
You can also set your clock back a few hours after... Anonymous
-
Hi,
I'm trying to clean up the MSBlast worm from... Madhu Kadaba
-
Monday, 7 pm.
No football on TV, nothing to do, so... Linda Ladwig
-
I seem to have that msblast worm but I dont see ms... Anonymous
-
if u guys need time to stop from restarting....go... JiMmErS
-
Hats off to Zonealarm!
Just want to say that my (f... SD
-
IIf you get the box that says you have a minute be... Chris
-
First of All use LINUX!!
second: check how many ti... Thomas Sinczak
-
Hey guys!
If anyone is still having problems with... Gilbert Ortiz
-
Ive tried grays solution and the CMD one and the R... Anonymous
-
My WIN2K system has been infected with the blaster... Anonymous
-
i was recently infacted with MSBlast worm,
since i... azmol hussain
-
Norton Internet Security firewall stops the worm i... G. Mack
-
Possible that there exists more than one variety o... Ryan Stephen -
Having same problem as Ryan S.
"svchost.exe has ge... CheeseDog
-
Hi everybody! I was hit by MSBlast worm and I just... Anonymous
-
I have the same problem as Cheesedog exactly and h... Christina Shaw
-
hey everyone, i kinda have a solution on msblast,... Uves C...
-
I was very happy with the advice this site provide... Darius
-
I truly hope the perpetrators of these worms/virus... Anonymous
-
I believe my problem was the Welchia/Nachia worm
A... CheeseDog
-
I have the worm virus on my laptop, I have tried t... jacqui boothe
-
I seriously doubt these claims that the virus has... Phil
-
If anyone needs help with MSBLASTER or any other w... ERIC
-
I didn't have the MSBLAST worm--but something very... FREAKED THE HECK OUT
-
Everything says I have isolated the worm, but am s... Cindy Barrett
Back to: Cleaning up after the MSBlast worm
