Hi, Yes we have turned those off, but without any luck. There is a svctask.exe process that I can't seem to google, does anyone have a clue what it does?
-----Original Message----- From: Steve Molkentin [mailto:[EMAIL PROTECTED] Sent: woensdag 7 april 2004 07:45 To: Exchange Discussions Subject: RE: system shutdown Kim, What OS? If WinXP, make sure you turn off the system restore funtion BEFORE running the AV tool, so that it isn't hidden away ready to run again. themolk. > -----Original Message----- > From: Kim Schotanus [mailto:[EMAIL PROTECTED] > Sent: Wednesday, 7 April 2004 2:27 PM > To: Exchange Discussions > Subject: RE: system shutdown > > Yep, tried one from symantec: Msblast, and it doesn't find a thing... > > -----Original Message----- > From: Chakravarty, Sakti [mailto:[EMAIL PROTECTED] > Sent: woensdag 7 april 2004 00:42 > To: Exchange Discussions > Subject: RE: system shutdown > > > Have you run the worm removal tool? If you applied the patches after > being infected, they won't remove the worm. > > -----Original Message----- > From: Kim Schotanus [mailto:[EMAIL PROTECTED] > Sent: Tuesday, 6 April 2004 8:06 PM > To: Exchange Discussions > Subject: system shutdown > > > Hi there > > all our workstations seem to be infected by the blaster worm > although we > have trends 851 update and have automatic updating, and Microsoft > patches MS03-026 and 39. We can't seem to get rid of this thing and > nothing is picked up by Trend's disaster recovery, sysclean > or Mcafee's > stinger. > Does anyone have a clue what I can do? (We do have a firewall as > well...) > > Kim > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > ext_mode=& > lang=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > ********************************************************************** > This message is intended for the addressee named and may contain > privileged information or confidential information or both. If you are > not the intended recipient please delete it and notify the sender. > ********************************************************************** > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > ext_mode=& > lang=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > ext_mode=&lang=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
