msblast virus

Can anyone please let me know if I need to do something else re the above -
downloaded the patch which stopped but the above is in the 'system
configuration utility' under start up tab but the tick is not in the box -
(its not enabled).

Thanks

 

If it is not ticked, you just need to remove the entry from
the disabled run key, in the registry:

HKEY_LOCAL_MACHINE
Software
Microsoft
Windows
CurrentVersion
Run-

Notice the minus sign after Run. This is where msconfig places
unchecked registry 'run' entries.

 

I have gone through the process suggested but do not know what is meant by
(Notice the minus sign after Run. This is where msconfig places unchecked
registry 'run' entries.)
Do not know what to delete when I clicked on the + Run

Thanks in anticipation

 

Can't tell you much, but someone will be along shortly to offer advice. In
the meantime, you might like to look for earlier posts on the same subject.
And as for posting, whatever you do, don't post in HTML. And if you want to
post test messages, please use a TEST group.

alt.test --------------------------------->
misc.test ------------------------------>
za.test --------------------------------->

The purpose of test newsgroups is to allow users to test
their news software and servers without annoying others.

FYI http://www.uwasa.fi/~ts/http/testpost.html

Thank You

 

Tom said:

Does this graphic help?

http://vil.nai.com/vil/SystemHelpDocs/Regedit.htm

 

This is the Flibbydabby Dee service of the BBC, & on 3 Sep 2003 04:48:47 +0200,
the TROLL, *not* Boomer.. uttered this:

MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
From: "Boomer.." <>
Newsgroups: 24hoursupport.helpdesk
References: <Ru95b.8341$>
Subject: Re: msblast virus
Organization: OSadvocacy
Message-ID: <>
X-OriginalArrivalTime: 03 Sep 2003 02:47:39.0447 (UTC)
FILETIME=[BD45CC70:01C371C5]
Date: 3 Sep 2003 04:48:47 +0200
Lines: 25
X-Mail2News-Contact: http://80.65.224.85/
Path:
news5.aus1.giganews.com!firehose2!nntp4!intern1.nntp.aus1.giganews.com!border3.nntp.aus1.giganews.com!nntp.giganews.com!newsfeed1.easynews.com!easynews.com!easynews!news-out.nuthinbutnews.com!propagator2-sterling!news-in-sterling.newsfeed.com!Gilgamesh-frogadmin.yi.org!not-for-mail
Xref: intern1.nntp.aus1.giganews.com 24hoursupport.helpdesk:1016665

 

This is the Flibbydabby Dee service of the BBC, & on 3 Sep 2003 04:48:47 +0200,
Boomer.. uttered this:
<snip>

IGNORE the troll posing as Boomer, & posting from one of these
anonymous remailers:-
X-Mail2News-Contact: http://80.65.224.85/
Mail-To-News-Contact:
&
Mail-To-News-Contact:

The REAL Boomer posts from:-
NNTP-Posting-Host: f56d0e60.authen.yellow.readfreenews.net

 

Click on the Run- key, and in the right hand window, you
will see the entry that is listed (but not checked) in msconfig.
Highlight it and press DELETE.

 

Mike
I cannot decipher which entry to delete in the right hand window, none of
them appear like the entry in msconfig.
Maybe I am missing the obvious and "cant see the wood from the trees"
I am grateful for the help/advice.

Thanks

 

You said that the entry is still in msconfig, under the startup tab,
so post the *unchecked* contents of the startup tab, and also
the contents of the Run- key here.

 

It most certainly is not.

Put that file on some webspace, then post an URL here.

 

<Piggybacked>

To Tom:
You should NOT post attachments in this group, Tom. I do not
see it, as they get filtered by my news server. If you still need
help, you need to post the details, or upload it to some web
space, like advised by Santiago.

 

He Boys ' gels,
Im quiet new at all of this but maybe i can ask you something, still.
I have installed Norton- symantec intern. sec. 2003
but there is something wrong. It keeps on live-updating the same (in size)
updates and then 'says' it could not be activated because it was trying to
overwrite a program that was in use ( and says: 'close all the Nor.-Sym.
programs and try again, witch does'nt work eather)
Somebody know what i should do??
Boris

 

1. Create a new thread; don't use a current thread for
new questions.

2. When you do reply, include some of the original message.

3, Read the links on the following page:
http://uk.geocities.com/personel44/newtonews.html