This is a new worm which has just started to circulate today, W32.Blaster.
By now, removal info should be available on the various antivirus websites.
This worm takes advantage of a critical flaw in several versions of
Windows. Microsoft released a fix to Windows Update about a month ago, and
network admins have been scrambling the last two weeks to get that patch
widely installed.
David Gillett
On 12 Aug 2003, at 7:06, Greg De Guzman wrote:
> I'm troubleshooting a friend's computer that started behaving erratically
> that shows a pop-up after about 5 minutes that says "windows is shutting
> down due to a ____ terminated process". The pop-up starts a timer within
> itself after which the system re-starts. This process repeats itself
> ad-infinitum everytime the computer re-starts.
>
> I thought of peeking through the start-up list and see what the system was
> loading and looked for unfamiliar programs. One entry caught my attention,
> and it is "msblast.exe". I did a search from the computer's Start Menu for
> the "msblast.exe* and it found the ff:
>
> c:\Windows\System32\msblast.exe
>
> c:\windows\Prefetch\MSBLASTEXE-09FF84F2.pf
>
> Deactivating the "msblast.exe" from the Start-up List stopped the process.
>
> What are these files? Are these Virus Payloads? Nothing was detected through
> the Norton AV installed with a Virus Definition dated 6/27/03 after
> repeating the Scan.
>
> Thanks for any inputs.
>
>
> Greg
>
> PCSOFT maintains many useful files for download
> visit our download web page at:
> http://freepctech.com/downloads.shtml
Curious about the people moderating your
messages? Visit our staff web site:
http://freepctech.com/staff.shtml
|