Home Forums Windows 7 Security Tips

Windows 7
Windows Vista
Windows XP

Security Tips
Keyboard Shortcuts


Internet Terms
Computer Terms

File Extensions (75)
File Extensions (15K+)

Startup Applications
Necessary Files
Useless Files
At Your Option Files
Dangerous Files
Browser Objects

DLL Files
SYS Files
INF Files
OCX Files
VXD Files

Virus Database
Virus Warnings

Easter Eggs
Tips and Tricks
Hot Downloads

Privacy Policy
Contact Us


Name eschlp.exe


W32.Blaster.T.Worm is a worm that exploits the DCOM RPC vulnerability (described in Microsoft Security Bulletin MS03-026) using TCP port 135.
The worm targets only Windows 2000 and Windows XP computers. W32.Blaster.T.Worm does not have a mass-mailing functionality.
For additional information, read the Microsoft article, "What You Should Know About the Blaster Worm and Its Variants."
We recommend that you block access to TCP port 4444 at the firewall level. Also block the following ports if you do not use either DCOM RPC or TFTP:

The worm also attempts to perform a Denial of Service (DoS) on the Microsoft Windows Update Web server (
This is an attempt to prevent you from applying a patch on your computer against the DCOM RPC vulnerability.
Changes the Internet Explorer start page to http:/ /
Also Known As: W32/Blaster-G, WORM_MSBLAST.I, W32/Blaster.worm.k

Copies itself as the following files:

Adds the values:
"Helper" = "%System%\eschlp.exe /fstart"
"MSUpdate" = "%System%\svchosthlp.exe"
to the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Creates the key:

Automatic removal:
Use antivirus (also check How To Remove section)Startuip Optimizer to remove this worm from your computer.

Still have a problem? Ask for help at our discussion forum.

Search Dangerous Files :

: : Recent posts at Forums : :

Услуги частно

Pictures from venereal networks

Latest spot

Mature galleries



Callow Poke out

Grown up placement

My supplementary website

Sexy men photo blog

Unencumbered galleries

My unfamiliar website

Experimental Poke out

Experimental Job

New Job

Секс-галерея порно и секс фото с зрелыми д

Recent plat

Unshackle galleries

Услуги частно

Callow Job

Wholesale Jerseys Supply

My supplementary website

Social pictures

Grown up placement

Free galleries

Grown up site

Stud Royal Crown Clear Cubic Zirconia - 290539CZ - NOK 451 : Billige pandora smykker

Experimental Job

Social pictures

Gay blogging rite, Everyday photos

SoftwareTipsandTricks, All Rights Reserved.