Re: Question about worm removal...

Follow ALL the instructions here:
http://securityresponse1.symantec.co...laster.worm.re
moval.tool.html
This is an updated version of the FIXBLAST tool.
The MS patch has also been updated also, the link for it is on the Symantec
link.
--

Kenny


"Kathy" <> wrote in message
news:...
A few weeks ago I posted to the NG asking questions about my in-laws
computer having connection problems, well, she called me the other night and
I went over there to see if I could do anything to fix her computer... well,
I unchecked the box that tells the modem to disconnect after so many
minutes. After that I seen she had about ten things in the systray, so I
told her she doesn't need all of these things starting up at startup. So, I
ran the msconfig and went into the Startup folder to uncheck some things...
guess what I found? The msblast.exe (worm)... I tried my best to download
the patch and finally did, but that doesn't help unless the worm is
completely removed. She has NEVER updated any windows updates or her NAV
updates. I tried like hell to update the NAV files, but each time it tells
me there was a problem with the Internet connection, well, there is no damn
problem, unless this could be the worm preventing me from getting the NAV
updates? Anyway, what a mess her computer is right now and I am the one that
has to clean up the mess just because some people are too damn lazy to get
the updates!

Now I already know about the FixBlast tool, but I want to remove the worm
manually because I want this to be a learning experience for me. I know the
step by step procedures, but what I really want to know is will I have to do
this in Safe Mode, or is it okay to do it in Normal Startup? The OS is XP
and they don't have broadband connection, just dial-up...

Thanks in advance,
Kathy
A+

Kenny