[THIN] Re: MSBLAST remove - AD Group Policy startup script.

  • From: "Magnus" <magnus@xxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Mon, 22 Sep 2003 13:13:24 -0400

Paul
Would you mind sending me theGPO script that you had sent to the list.
Outlook blocked it on me

Thanks
Magnus

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Paul DeHaan
Sent: Tuesday, August 19, 2003 2:25 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] MSBLAST remove - AD Group Policy startup script.


Here is a script that we have implemented as a Group Policy startup
script.  It will run each time a computer in our Active Directory domain
turns on or restarts their computer, then write to a log file if it
finds and removes one or move of the worms.  This has caught and removed
a number of unknown instances of the worm for us.

The program follows the basic steps to remove the MSBlast worm and some
of it's variants (posted by Symantec, NAI, etc.).  Feel free to use or
edit this to fit your environment.

Regards,


********************************************************
This Week's Sponsor:  ThinPrint
http://www.thinprint.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

Other related posts: