Sorry; there's a bit of a panic in my ear at the moment. Yes, rename it to .vbs and either: 1. dbl-click it or 2. open a cmd window to the folder where you extracted it and use "cscript find_msblast.vbs". Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://www.microsoft.com/isaserver http://isaserver.org/Jim_Harrison http://isatools.org Read the help, books and articles! ----- Original Message ----- From: "Armando Treviño López" <armando.trevino@xxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Monday, August 11, 2003 18:32 Subject: [isalist] Re: w32.blaster.worm http://www.ISAserver.org hello. How do i execute that file to find and remove the worm? Do i have to rename the extension .vb_ to exe or something? thanks -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Monday, August 11, 2003 8:16 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: w32.blaster.worm http://www.ISAserver.org This is a multi-part message in MIME format. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')