Kim, What OS? If WinXP, make sure you turn off the system restore funtion BEFORE running the AV tool, so that it isn't hidden away ready to run again.
themolk. > -----Original Message----- > From: Kim Schotanus [mailto:[EMAIL PROTECTED] > Sent: Wednesday, 7 April 2004 2:27 PM > To: Exchange Discussions > Subject: RE: system shutdown > > Yep, tried one from symantec: Msblast, and it doesn't find a thing... > > -----Original Message----- > From: Chakravarty, Sakti [mailto:[EMAIL PROTECTED] > Sent: woensdag 7 april 2004 00:42 > To: Exchange Discussions > Subject: RE: system shutdown > > > Have you run the worm removal tool? If you applied the patches after > being infected, they won't remove the worm. > > -----Original Message----- > From: Kim Schotanus [mailto:[EMAIL PROTECTED] > Sent: Tuesday, 6 April 2004 8:06 PM > To: Exchange Discussions > Subject: system shutdown > > > Hi there > > all our workstations seem to be infected by the blaster worm > although we > have trends 851 update and have automatic updating, and Microsoft > patches MS03-026 and 39. We can't seem to get rid of this thing and > nothing is picked up by Trend's disaster recovery, sysclean > or Mcafee's > stinger. > Does anyone have a clue what I can do? (We do have a firewall as > well...) > > Kim > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > ext_mode=& > lang=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > ********************************************************************** > This message is intended for the addressee named and may contain > privileged information or confidential information or both. If you are > not the intended recipient please delete it and notify the sender. > ********************************************************************** > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > ext_mode=& > lang=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > ext_mode=&lang=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
