RE: Purging Blaster.worm

["Preston, Tony" <Tony.Preston () acs-inc com>]

 I manually got rid of it on my work PC with the following steps:

1) kill msblast.exe process
2) delete msblast.exe from windows/system32
3) delete msblast.exe*.pf from windows/prefetch
4) delete all registry keys with msblast in them
5) The patch from Microsoft was applied, but the next
day I was re-infected after doing steps 1, 2, and 4.
I repeated these steps today after adding #3 and it is
not back (althought my firewall blocks port 135 hits
trying to re-infect).

-----Original Message-----
From: Jose Guevarra
To: security-basics () securityfocus com
Sent: 8/12/2003 8:06 PM
Subject: Purging Blaster.worm

Hi,

 Has anyone successfully purged the MSBlaster worm. There is a tool out
there that can do it but is it reliable?

thanx,

============


------------------------------------------------------------------------
---
------------------------------------------------------------------------
----

---------------------------------------------------------------------------
----------------------------------------------------------------------------