New Strain of Worm

[Ben]

I have removed the MSBLAST worm from several computers -
all pretty much routine. Today I have come across a
different strain - this one will not allow you to open
the task manager, msconfig, or registry editor.

I noticed 3 files in the startup folder - webdav.exe,
tftp848.exe and tftp3932.exe

Anyone have any idea what this is?

[Kent W. England [MVP]]

The tftpnnnn files are leftovers from msblast.exe. webdav is a Microsoft
application. Doesn't sound like a new strain to me.

--
Kent W. England, Microsoft MVP for Windows



"Ben" > wrote in
message ...

> I have removed the MSBLAST worm from several computers -
> all pretty much routine. Today I have come across a
> different strain - this one will not allow you to open
> the task manager, msconfig, or registry editor.
>
> I noticed 3 files in the startup folder - webdav.exe,
> tftp848.exe and tftp3932.exe
>
> Anyone have any idea what this is?

[Bishoop]

"Kent W. England [MVP]" > wrote in message
...
> The tftpnnnn files are leftovers from msblast.exe. webdav is a Microsoft
> application. Doesn't sound like a new strain to me.
>
> --
> Kent W. England, Microsoft MVP for Windows
>
>
>
> "Ben" > wrote in
> message ...
>
> > I have removed the MSBLAST worm from several computers -
> > all pretty much routine. Today I have come across a
> > different strain - this one will not allow you to open
> > the task manager, msconfig, or registry editor.
> >
> > I noticed 3 files in the startup folder - webdav.exe,
> > tftp848.exe and tftp3932.exe
> >
> > Anyone have any idea what this is?

My granddaughter's PC has the webdav.exe file in the startup folder also.
Same symptoms as Ben mentioned, can't access task manager, msconfig or
regedit.

She doesn't have the symptom where the PC shuts down every 60 seconds that I
have heard talked about with the msblast worm.

[Randall Arnold]

There are other viruses going around via email, such as message.zip and a
few others that Norton's has been nabbing for me. People keep opening those
&^%$*-ing attachments...

Randall Arnold

"Ben" > wrote in message
...
> I have removed the MSBLAST worm from several computers -
> all pretty much routine. Today I have come across a
> different strain - this one will not allow you to open
> the task manager, msconfig, or registry editor.
>
> I noticed 3 files in the startup folder - webdav.exe,
> tftp848.exe and tftp3932.exe
>
> Anyone have any idea what this is?

[Kent W. England [MVP]]

That is a different virus.

--
Kent W. England, Microsoft MVP for Windows



"Bishoop" > wrote in message
...
>
> My granddaughter's PC has the webdav.exe file in the startup folder
also.
> Same symptoms as Ben mentioned, can't access task manager, msconfig or
> regedit.
>
> She doesn't have the symptom where the PC shuts down every 60 seconds
that I
> have heard talked about with the msblast worm.
>
>