CDROM-Guide forums  

PDA

View Full Version : HELP! msblast.exe in registry


   
leadan
Sep 06, 2003, 04:16 PM
Norton found a trojan horse on my computer last night aptly named 'trojan horse' in verifierbug.class.
Anyway i think i've removed it ok but i was just looking in the registry for ant traces of it.
I didn't find anything related to this trojan but i did see a enrty in the registry for msblast.exe.
It was found here: HKEY_USERS\software\microsoft\search assistant\ACMru\5603

Is this likely to be the blaster virus lurking in the background somewhere?
Or could it refer to a patch to prevent it from running?
I update windows regularly so i'm not sure if i have anything to worry about or not.

All help is much appreciated.

Darkman
Sep 06, 2003, 09:23 PM
Regclean (www.pcworld.com/downloads/file_description/ 0,fid,4666,00.asp) is a effective proggy for dealing with registry entries.

QWERTY
Sep 06, 2003, 09:28 PM
It's not the blaster worm. What you found was the registry entry that temporarially stores the value you are looking for when you do a search on your system. Since you were searching for "msblast.exe" it will contain that value.

You are only infected with the original blaster worm if it appears under the HKLM\Software\Microsoft\Windows\CurrentVersion\Run key or if "msblast.exe" appears to be a running process in Task Manager.

leadan
Sep 06, 2003, 09:50 PM
Thanks for the replies.
Darkman, i'll have a look at that for future reference.

QWERTY, Thats just what i wanted to hear m8.
Hopefully i'm clean from any virus or trojan.

thanks again.