New Virus/Worm Warning!!!!!

[VPJunkie]

There's a new worm that's already caught at least one member. Make sure you have your Windows updates installed ASAP!!!

Here's an article Fiction posted about it this am -

http://news.bbc.co.uk/1/hi/technology/3143625.stm


To Detect:

Pressing control-alt-delete, then clicking on "Task Manager" and selecting the "Processes" tab will bring up a list of processes running on the machine. Clicking on "Image Name" will sort the processes alphabetically. If there is a process named "msblast.exe" running on the system, then it has been infected by the worm.


To Remove:

Stop the msblast.exe from running via the “Task Manager”(ctrl/alt/del) then delete the msblast.exe file from your system32 folder. That’s it, now all you have to do is patch up that system.

[universal4]

Upwards of 50% of the calls to my shop today have been about this worm!!

It appears that the exe may be carrying a new name also, but I have not been able to verify that yet...if anybody can verify this fact please pm me...

Rick
Universal4

[jeffyfan]

I did the windows update should that cover everything???
Jonda

[universal4]

By the way!!
...this puppy resides in the windows system32 folder...so when you search for the msblast.exe file...be sure you have enabled searching in hidden folders.

To do this..
Click start
Search
All files and folders
More advanced options
tick the checkbox titled "Search hidden files and folders"
the type in the name msblast.exe in the filename box and click search.

If this file is found, you can right click and delete this file in the results window.