Jump to content

Removing The W32.Blaster.Worm


havnblast

Recommended Posts

1. Patch Your System with the appropriate MS03-026 Patch 2. After Installation of the Patch, Reboot your system. 3. Download and run "FIXBLAST".exe to remove the MSBLAST.exe file, terminate the process and remove added registry keys by the worm. 4. Reboot your pc one last time. 5. Visit WindowsUpdate.com more often and take note of our repeated warnings to keep your system updated.Result:Your System will no longer shutdown after 60secs, please follow the steps above to remove the worm off your computer and return your system to UPDATED safe status.UPDATE: If your having problems installing the patch within the 60 sec, when you see the window pop up telling you 60 sec, Go to Start, Run and type in shutdown -a. This will cancel the shutdown attempt. FixBlast.exe DownloadSymantec Response Article

Link to comment
Share on other sites

There is one very important step that was left out of this line up that if not done, will hide a copy of this worm to come back and bite you in the ass later.After installation of the patch and subsequent rebooting, you MUST disable the 'System Restore' facility. You must also then open Task Manager, select 'msblast.exe' and 'End Task. Then run the 'FixBlast.exe' (it is the smallest and fastest tool) through completion and reboot.Turn the 'System Restore' facility back on and you will be back in business. :rolleyes:

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...