w32 blaster

[Mat]

My computer is infected with that w32blaster virus and i
can't get rid of it even with the symantec removal tool.
Will reinstalling windows xp and completly lose my current
data eliminate the virus?
Thank you

 

[Taylz]

have you installed all the relevent patches and critical updates aswell as
using the removal tool?
In all the cases I've head of this had worked

Taylz

 

[purplehaz]

A format will rid you of the virus, but try/read this: (make sure you turn
system restore off before you run the removal tool)

To stop the rebooting/shutdowns, right click on the task bar, choose task
manager, processes tab, look for msblast.exe. Highlight it and click end
process. Then turn on the xp firewall.

To turn on the firewall: control panel, network and internet connections,
network connections, right click your connection, properties, advanced tab,
check the protect my computer box. Do this as quickly as you can once the
desktop comes up. Then visit the sites below for the removal and patch info.

Symantec: removal info and removal tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

Network associates: removal instructions
http://vil.nai.com/vil/content/v_100547.htm


Also make sure to follow the links to the Microsoft pages for the patch or
visit windows update for the patch after you remove it.


More info:

http://support.microsoft.com/?kbid=823980

 

[Mat]

I already did that and now the removal tool is not able to
find the virus even if it is still there

 

[Jim Byrd]

Hi Mat - Download and run this script from Kelly's site:
http://www.kellys-korner-xp.com/regs_edits/msblast.vbs Then re-install the
patch (the script will give you a link if you wish).

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In

 

[Ken]

-----Original Message-----
My computer is infected with that w32blaster virus and i
can't get rid of it even with the symantec removal tool.
Will reinstalling windows xp and completly lose my current
data eliminate the virus?
Thank you
.
Check this site:-

http://www.microsoft.com/security/incident/blast.asp

 

[Mat]

Thank you all for your answers but since i know i can get
rid of that virus with a format and that my computer is
pretty messy, i will take advantage of this situation by
cleaning it all.
Have a nice day

 

[Nola]

That's what I had to do, ... had to reformat the hard
drive and then reinstall everything....

 

[Larry Samuels MS-MVP XP \(Shell/User\)]

When the shutdown prompt appears,go to start/run and type
shutdown -a to abort the shutdown process to allow you to stay up and
online.

http://www.kellys-korner-xp.com/xp_qr.htm#rpc

There are 2 more variants out now.
The exes for the variants are teekids.exe and penis32.exe
Kelly's script kills all 3 variants.

--
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone - www.microsoft.com/windowsxp/