[THIN] Re: MSBLAST remove - AD Group Policy startup script.

  • From: "Rob Beekmans" <RobBeekmans@xxxxxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Tue, 19 Aug 2003 21:08:12 +0200

Paul,

Could you send it zipped...otherway's it's stopped.....
Thanks....

Met vriendelijke groeten / With kind regards
 
Rob Beekmans
Technical Consultant
A-Tree Automatisering
 
Business Phone: +31 24 6452000
Business Fax: +31 24 6450463
Business website: http://www.a-tree.nl
Business E-mail: R.Beekmans@xxxxxxxxx
 
Private E-mail: RobBeekmans@xxxxxxxxxxxxx
Private website: http://joulupukki.nl
 


-----Oorspronkelijk bericht-----
Van: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] Namens
Paul DeHaan
Verzonden: dinsdag 19 augustus 2003 20:25
Aan: thin@xxxxxxxxxxxxx
Onderwerp: [THIN] MSBLAST remove - AD Group Policy startup script.


Here is a script that we have implemented as a Group Policy startup script.
It will run each time a computer in our Active Directory domain turns on or
restarts their computer, then write to a log file if it finds and removes
one or move of the worms.  This has caught and removed a number of unknown
instances of the worm for us.

The program follows the basic steps to remove the MSBlast worm and some of
it's variants (posted by Symantec, NAI, etc.).  Feel free to use or edit
this to fit your environment.

Regards,

********************************************************
This Week's Sponsor:  RES PowerFuse, The Management Framework for Windows
Eliminate Multiple Tools, Multiple Support Channels and Multiple Costs
Manage, Control, and Secure an Entire Windows environment with Ease, including 
Real-time Reporting and Documenting Components
Validate a Meaningful ROI on All of your IT Investments with RES PowerFuse.
http://www.respowerfuse.com/
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

Other related posts: