Have the Microsoft worm

[Rowdyboy]

can stay logged on no more than one to 3 minutes before autmatic shutoff.
Any suggestions?

Would the "patch" help at this stage?

Help!!!

[Runesong]

1. Quick fix

I had a customer in my shop today with that virus. Here's what I did.

Click start-->accessories-->Command Prompt.

Type:

cd \windows\system32

rename msblast.exe msblast.biteme

regedit

*** the registry editor will pop up ***

Seek and destroy the following registry key

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\windows auto update=msblast.exe



Restart your system and that should do it.

Make sure you run live-update on your virus scanner, and MS Windows Update afterwards to protect against future infections.

[Rick Myers]

2. Use regedit with care!

[Runesong]

3. True.

But it still needs to be done.

I beleive you can use the safer MSCONFIG, and eliminate it from the start-up section, but I haven't tried it yet.

[graywarrior]

4. Just spent 2 hours with Maxanne

solving the same thing.
To stay on line for longer than 3 minutes:
While you a waiting for your computer to reboot(with that aggravating little message counting down) go to your Start button, then to Run. Type in command. Enter. At prompt, type shutdown(sp(-a
enter again.
That should keep you up long enough to download.

[Jackpine Radical]

5. I got it too & ran Norton.

Norton already has a worm cleaner up on their site, which I got to via their antivirus SW.
Then the patch, which Norton also provided a link for. Crossing my fingers...so far it was easy.

[geniph]

6. Use the removal tool

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

[Rowdyboy]

7. Thank all you guys so much....

I'll start fresh tomorrow-but you have given me hope...

[noiretextatique]

8. i had it!

maybe this was the source of my recent problems. free avg by grisoft detected and fixed it ust fine.

[bearfartinthewoods]

9. all i needed to get dewormed, i found in this thread...THANKS

wouldn't you know my virus and firewall trial period ended 8/13.
by the time i got to the update site, i was already infected.

thanks again for the info and links.