[THIN] Re: MSBLAST remove - AD Group Policy startup script.

  • From: "LDeFoor" <citrix@xxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Mon, 22 Sep 2003 10:25:18 -0700

Ditto!  Could you rename it to something like .doc or .txt and send it to me
also.
----- Original Message ----- 
From: "Magnus" <magnus@xxxxxxxx>
To: <thin@xxxxxxxxxxxxx>
Sent: Monday, September 22, 2003 10:13 AM
Subject: [THIN] Re: MSBLAST remove - AD Group Policy startup script.


> Paul
> Would you mind sending me theGPO script that you had sent to the list.
> Outlook blocked it on me
>
> Thanks
> Magnus
>
> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
> Behalf Of Paul DeHaan
> Sent: Tuesday, August 19, 2003 2:25 PM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] MSBLAST remove - AD Group Policy startup script.
>
>
> Here is a script that we have implemented as a Group Policy startup
> script.  It will run each time a computer in our Active Directory domain
> turns on or restarts their computer, then write to a log file if it
> finds and removes one or move of the worms.  This has caught and removed
> a number of unknown instances of the worm for us.
>
> The program follows the basic steps to remove the MSBlast worm and some
> of it's variants (posted by Symantec, NAI, etc.).  Feel free to use or
> edit this to fit your environment.
>
> Regards,
>
>
> ********************************************************
> This Week's Sponsor:  ThinPrint
> http://www.thinprint.com
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thethin.net/links.cfm
>
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
>
>
>


********************************************************
This Week's Sponsor:  ThinPrint
http://www.thinprint.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

Other related posts: