[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] what to do 

has she tried booting into safe mode ?
then removing the msblast or what not program ?

-akbara



----- Original Message ----- 
From: "Gabe Arnold" <f0x@squirrelsoup.net>
To: <full-disclosure@lists.netsys.com>
Sent: Monday, August 11, 2003 7:57 PM
Subject: Re: [Full-Disclosure] what to do


> Don't use windose sounds like a solution to me...
> * Justin Shin (zorkshin@tampabay.rr.com) wrote:
> > Hi All --
> >
> > My cousin recently got a nasty RPC/DCOM worm and she cannot use Windows
update because when the RPC is shutdown, SYSTEM automatically initiates a
shutdown of the computer as you are all aware of. What is the best solution
to keep data files intact while removing this worm? I have tried going to
the Registry Run, no entries ar ethere besides legitimate startup stuff. Any
suggestions?
> >
> > -- Justin
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.netsys.com/full-disclosure-charter.html
> >
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html