RE: what to do

["Calvyn" <Calvyn () stny rr com>]

I'm was just working with my 15 year old niece in NJ, through IM, to
help her keep her WinXP PC from rebooting every minute. She had 2 copies
of msblast.e x e on her PC. One was delete-able the other we had to
reboot into safe mode to delete. After deleting the last e x e  her unit
is NOT rebooting. I have since had her update her unit and disable DCom.

Amazing how kids never listen to you when you ask them to update their
PCs.. 

-Calvyn-


-----Original Message-----
From: full-disclosure-admin () lists netsys com
[mailto:full-disclosure-admin () lists netsys com] On Behalf Of akbara
Sent: Tuesday, August 12, 2003 1:52 AM
To: Gabe Arnold; full-disclosure () lists netsys com
Subject: Re: [Full-disclosure] what to do


has she tried booting into safe mode ?
then removing the msblast or what not program ?

-akbara



----- Original Message ----- 
From: "Gabe Arnold" <f0x () squirrelsoup net>
To: <full-disclosure () lists netsys com>
Sent: Monday, August 11, 2003 7:57 PM
Subject: Re: [Full-disclosure] what to do


> Don't use windose sounds like a solution to me...
> * Justin Shin (zorkshin () tampabay rr com) wrote:
> > Hi All --
> >
> > My cousin recently got a nasty RPC/DCOM worm and she cannot use 
> > Windows
update because when the RPC is shutdown, SYSTEM automatically initiates
a shutdown of the computer as you are all aware of. What is the best
solution to keep data files intact while removing this worm? I have
tried going to the Registry Run, no entries ar ethere besides legitimate
startup stuff. Any suggestions?
> > -- Justin
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.netsys.com/full-disclosure-charter.html
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html