Ditto! Could you rename it to something like .doc or .txt and send it to me also. ----- Original Message ----- From: "Magnus" <magnus@xxxxxxxx> To: <thin@xxxxxxxxxxxxx> Sent: Monday, September 22, 2003 10:13 AM Subject: [THIN] Re: MSBLAST remove - AD Group Policy startup script. > Paul > Would you mind sending me theGPO script that you had sent to the list. > Outlook blocked it on me > > Thanks > Magnus > > -----Original Message----- > From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On > Behalf Of Paul DeHaan > Sent: Tuesday, August 19, 2003 2:25 PM > To: thin@xxxxxxxxxxxxx > Subject: [THIN] MSBLAST remove - AD Group Policy startup script. > > > Here is a script that we have implemented as a Group Policy startup > script. It will run each time a computer in our Active Directory domain > turns on or restarts their computer, then write to a log file if it > finds and removes one or move of the worms. This has caught and removed > a number of unknown instances of the worm for us. > > The program follows the basic steps to remove the MSBlast worm and some > of it's variants (posted by Symantec, NAI, etc.). Feel free to use or > edit this to fit your environment. > > Regards, > > > ******************************************************** > This Week's Sponsor: ThinPrint > http://www.thinprint.com > ********************************************************** > Useful Thin Client Computing Links are available at: > http://thethin.net/links.cfm > > For Archives, to Unsubscribe, Subscribe or > set Digest or Vacation mode use the below link: > http://thethin.net/citrixlist.cfm > > > ******************************************************** This Week's Sponsor: ThinPrint http://www.thinprint.com ********************************************************** Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm