Re: what to do

has she tried booting into safe mode ?
then removing the msblast or what not program ?

-akbara

----- Original Message -----
From: "Gabe Arnold" <f0x_at_squirrelsoup.net>
To: <full-disclosure_at_lists.netsys.com>
Sent: Monday, August 11, 2003 7:57 PM
Subject: Re: [Full-disclosure] what to do

> Don't use windose sounds like a solution to me...
> * Justin Shin (zorkshin_at_tampabay.rr.com) wrote:
> > Hi All --
> >
> > My cousin recently got a nasty RPC/DCOM worm and she cannot use Windows
update because when the RPC is shutdown, SYSTEM automatically initiates a
shutdown of the computer as you are all aware of. What is the best solution
to keep data files intact while removing this worm? I have tried going to
the Registry Run, no entries ar ethere besides legitimate startup stuff. Any
suggestions?
> >
> > -- Justin
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.netsys.com/full-disclosure-charter.html
> >
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Received on Aug 12 2003