Results 1 to 3 of 3

Thread: Mslaugh - Teekids

  1. May 19th, 2004, 10:31 AM #1
    GenericAssassin
    GenericAssassin is offline
    Junior Member
    Join Date
    Jun 2002
    Posts
    15

    Mslaugh - Teekids

    Hi guys

    I been looking the processes on my laptop and i found teekids.exe and mslaugh.exe running. Any idea what they are?

    Cheers

    G.A
    Reply With Quote Reply With Quote
  2. May 19th, 2004, 10:48 AM #2
    MrLinus
    MrLinus is offline
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,323
    Sounds like you are infected with both Blaster and lovesan worms. Take a visit to http://housecall.trendmicro.com/ and get an online scan done (use IE for it).
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage
    Reply With Quote Reply With Quote
  3. May 19th, 2004, 12:44 PM #3
    Und3ertak3r
    Und3ertak3r is offline
    The Doctor Und3ertak3r's Avatar
    Join Date
    Apr 2002
    Posts
    2,744
    You will also need to patch your system.. A removal tool is available from trend as well as symantec ( www.symantec.com ) .. after it is run you will need to d/l a Group of patches from microsoft.. (just read the info for MSBLAST and SASSER worms) should be 4 patches you Urgently need to install.. you may need to d/l these patches using a clean/patched machine or a win98 box. ..

    BTW: MSBlast and lovesan are different names for the same worm, teekids and mslaugh are different versions of the same worm..
    GenericAssassin .. with two you probably have more.. (that is the trend that I have found usually 3 but have had 6 versions on one machine)


    Cheers

    There are some info in the Antivirus Forum on this subject.. have a read there as well!
    "Consumer technology now exceeds the average persons ability to comprehend how to use it..give up hope of them being able to understand how it works." - Me http://www.cybercrypt.co.nr
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules