I couldn’t stay connected long enough to get the patch either, the second the card was connected the countdown began I had to download the patch with another machine. The patch stopped the countdown but all the msblast stuff was still running and all still in the registry…I am angered that a puny insignificant subject would perpetrate such an unholy transgression upon my beloved computer. >

I am glad it is fixed now

My computer all of a sudden just shut off. When I turned it on, it would restart over and over again. I used XPs "load last good configuration" thing, the problem seemed to have been resolved...but when I reboot,same thing; it will restart over and over again. I can't find any MSBlast though, Norton anti-virus can't find it either.

Dacemtl....you'll need the latest Definitions to find it...dated 'today'...11 August 2003...

hmmmmm. In Australia it is even on the radio!

A friend of mine just complained to me about RPC acting funny. Now I know why.

Anyhow, I've disabled it by default, so I can't be hit.

The Windows update merely disables the virus.. and patches the hole in XP causing it, however it does NOT delete it. (no harm done with it there.. but deleting it is much safer than letting it hang around)

to DELETE the virus .exe file, download this program:

http://download.nai.com/products/mcafee-avert/stinger.exe

or, if you are paranoid (lol.. alot of forums im trying to give this to arent clicking the link)click the below link for more information about the Stinger virus removal tool (only kills this virus, and a few others...)

http://vil.nai.com/vil/stinger/

i had this virus also, but stupid me.. instead of waiting to hear news about it (which is near impossible.. its such a pain to be rebooted within 60 seconds of startup) i brought it to Bestbuy.. and paid 30 dollars for nothing, which ill be getting back tomorrow afternoon.. they charged me for a 'System Tune-Up' which was 30 dollars.. but for that much money i could buy something more useful, like the full windowblinds set for a little more.. but anyway, after i got it home, i tried it again, and it was still rebooting me.. then i discovered msblast.exe in my win32 folder, deleted it, deleted it from my bin, and viola..

if you dont have this virus, you WILL get it, nearly guarenteed.. so patch up, and save yourself the hassel of money-hungy tech support employees. >


im not sure if theres an image code on this site, but in case your unsure if this is your case, look at this screen shot:

http://www.mtmc4fun.com/temp/Image1.jpg

again.. download the patch, fix the restarting problem, then download the program to delete the virus completely, you shouldnt trust the shredding files from the recycling bin feature.

edit: sorry if there was already removal tool links in this topic, im just making sure.. all in one bundle, lol

Dont forget to delete the exe, either manually (use Start>search..mblast.exe) or using the program from the provided link in the post above yours

sorry typo. all that read mablast should read msblast

Does anyone know 'where' one actually aquires this worm? If there is something inside a download, or your mail, or from a website?

Heard about this worm on the local radio, and was in direct contact with a friend in canada, using peer-to-peer connection exchanging fotos
The next thing that happened was the 30 second warning and away went my web connection.

Thanks to those who have helped resolve this nasty irritant. seems some people still have it in for bill gates hey!?

This worm knocks on your door through port 135, which by default is open on NT systems.

Blegh, just noticed that I am indeed running the RPC-service. Probably essential then.

Am I the only one that patches? Wasnt this on the news EVERYWHERE! Jeez... just makes me mad I saw it on techtv's The Screen Savers like 80 million times... It took me a min maybe 2 to patch... And 10 of my n00b friends got it... I just make fun of them tell them they got rcped!