[dshield] RE: [Dshield] Interesting Prefetch file in Windows XP and MSBLAST.exe

R Shady RShady at stny.rr.com
Fri Aug 15 14:16:05 GMT 2003


The Prefetch folder is nothing but an application "startup" folder
when windows starts.  ALL files in prefetch can be deleted.  Don't
worry, Windows remembers these files.  Do a restart after deleting them.
You'll probably find that windows will start up a little faster.
If msblast re-appears in prefetch after you restarted, more than
likely you'll need to fo into the registry.
The most obvious places to start are:
Hotkey Current User\Software\Microsoft\Windows\CurrentVersion\Run
Hotkey Local Machine\Software\Microsoft\Windows\CurrentVersion\Run
Delete MSBlast in either or both in the above locations.  Restart
Hope that helps....


Deb Hale wrote:
> Yes,  I have a laptop that has the same file.  I am having a problem with
> this one finishing the windows updates that have not been installed.  I am
> getting an error that says that the software key is invalid. Not sure what
> is going on - will let you know if I figure something out - if anyone has
> any ideas let me know.  Deb
> 
> Deborah F Hale
> Certified Business Continuity Professional/Computer Security Specialist
> BCP Enterprise, Inc
> Telephone: (712) 252-0361
> www.bcpenterprise.com
>  
> 
> 
> -----Original Message-----
> From: list-bounces at dshield.org [mailto:list-bounces at dshield.org] On Behalf
> Of DAN MORRILL
> Sent: Thursday, August 14, 2003 7:46 PM
> To: incidents at incidents.org; list at dshield.org
> Subject: [Dshield] Interesting Prefetch file in Windows XP and MSBLAST.exe 
> 
> 
> This has only appeared on multiple Windows XP SP1 with MS-026 et al patches.
> 
> But interesting all the same.
> 
> But have noticed that MSBLAST.EXE is in a prefetch file from under 
> c:\windows\prefetch as msblast.exe-09FF8F2.pf
> 
> Seems to be unique and hoping that someone else has either seen anything 
> similar or otherwise.
> 
> Has anyone seen anything similar to this?
> 
> Thanks!
> r/
> Dan
> 
> 
> Dan Morrill
> 
> 
> 
> Sometimes MSN E-mail will indicate that the mesasge failed to be delivered. 
> Please resend when you get those, it does not mean that the mail box is bad,
> 
> merely that MSN mail is over worked at the time.
> 
> Otherwise, hope things are going well.
> r/
> Dan
> 
> _________________________________________________________________
> MSN 8 with e-mail virus protection service: 2 months FREE*  
> http://join.msn.com/?page=features/virus
> 
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
> http://www.dshield.org/mailman/listinfo/list
> 
> 
> 
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
> 





More information about the list mailing list