Re: MSBlast and other known exploits..

I've seen that too, but usually after an svchost.exe error (generally attributed to the virus). So far, it has stopped appearing once the system is cleaned up.

Also, I'm ensuring that XP has SP1 onboard, and Win2K has SP3. Make sure you're getting the MSBLASTxxxxxsomething file out of the Prefetch. Alot of people I have talked to have been missing that one, and think the system is cleaned.

• Original Message ----- From: "Micheal Patterson" <micheal@cancercare.net> To: <incidents@securityfocus.com> Sent: Wednesday, August 13, 2003 8:44 AM Subject: MSBlast and other known exploits..

> I've got reports of msblast infection that I've checked and they indeed do
frame
> and the contents of add/remove programs is missing. Also, various popup
recommending
> that these systems be blown away and reinstalled from clean media, I'm
just
> looking for some info to verify what's eaten away at these things.
-
> --------------------------------------------------------------------------

--

>



---------------------------------------------------------------------------
----------------------------------------------------------------------------