W32.Blaster.worm How Do You Kill It?

[Hostile]

The Symantec solution is not working. Malwarebytes.com isn't working.

Tell me what will.

 

[rkell87]

try restoring your system to a previous date?

I'm pretty sure i got this and nothing worked but it didn't kill my computer fast enough so i got everything i needed on some thumb drives and restored to factory defaults.

good luck though, i hope you don't have to do that

 

[rkell87]

found this

Please follow the instructions below if you would like to remove W32.Blaster.Worm manually. Please notice that you must follow the instructions very carefully and delete everything that is mentioned. In most cases the removal will fail if one single item is not deleted. If W32.Blaster.Worm remains on your system after stepping through the removal instructions, please double-check by stepping through them again.

Enable your firewall. If you don't have a firewall installed, click here.
Start your computer in safe mode.
Browse to the key:
'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'
In the right pane, delete the value called 'windows auto update', if it exists.
Exit the registry editor.
Start Windows Explorer and delete:
%SystemDir%\msblast.exe
Note: %SystemDir% is a variable (?). By default, this is C:\Windows\System (Windows 95/98/Me), C:\WINNT\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
Download all service packs and critical updates from www.windowsupdate.com.

 

[poke]

http://www.freedrweb.com/cureit/

it might help, used it before but not sure for that specifically

 

[MonsterD]

Curious how did you detect it if Symatec didn't work. And there is a weird tool from them I tried just to be sure yesterday called Deep something or other, it can damage your files but it is the highest level scan. I think if you look under your scan window it says "still think there are threats" or something like that in the current files being scanned box.

 

[YosemiteSam]

W32.Blaster.worm How Do You Kill It?

With a stick. While he slept. But on a horse, with a lance? That virus is unbeatable.

 

[kmp77]

Download SDFIX. Always worked for me.

I run norton internet security now, haven't gotten ANYTHING since.

 

[DallasEast]

You may wish to consider downloading and running Microsoft Security Essentials antivirus software. It's free. I have been very satisfied with it since replacing Avast! with it. It does a very good job of both detecting and removing trojans, etc.

 

[YosemiteSam]

You may wish to consider downloading and running Microsoft Security Essentials antivirus software. It's free. I have been very satisfied with it since replacing Avast! with it. It does a very good job of both detecting and removing trojans, etc.

Actually, I've been finding it isn't as good as it's reputation. (not sure where the good rep has come from)

It misses a lot of viruses. I recommend going with something better.

 

[Mash]

Just trying to find something to help you from the net Hos....

I just usually use rkill and run malewarebytes....but symantec should have a tool to remove it...might be this one...

http://www.symantec.com/security_response/writeup.jsp?docid=2003-081119-5051-99

or

http://www.softpedia.com/get/Antivirus/WBlasterWorm-Removal-Tool.shtml

or

Try Fixblast..

http://www.spychecker.com/program/fixblast.html



To remove W32/Blaster-A manually on Windows 95/98/Me and Windows NT/2000/XP:

ensure you have installed Microsoft patch MS03-039 and implemented as many of the steps mentioned above as is feasible.
press Ctrl+Alt+Del
in Windows NT/2000/XP click Task Manager and select the Processes tab
look for a process named msblast.exe in the list
click the process to highlight it
click the 'End Process' (in Windows 95/98/Me 'End Task') button
close Task Manager.
Search for the file msblast.exe in the Windows system folder (usually a subfolder of Windows or WINNT) and delete it.

In Windows NT/2000/XP you will also need to edit the following registry entry. The removal of this entry is optional in Windows 95/98/Me. Please read the warning about editing the registry.

At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.
Before you edit the registry, you should make a backup. If in doubt, contact your network administrator. Incorrect editing of the Windows Registry can cause system failure.
Locate the HKEY_LOCAL_MACHINE entry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

in the righthand pane select

windows auto update = msblast.exe

and delete it if it exists.
Close the registry editor.
You should reboot your computer and repeat the above process to ensure all traces of the worm have been removed from your system.

 

[TheCount]

Whoa you got Blaster? I thought that thing was dead forever ago. I remember business booming when I worked computer tech years and years ago when that thing was going around.

There should be instructions all over the place, it was a really huge problem for a lot of people around that time. Hope you got rid of it.

 

[Hostile]

Whoa you got Blaster? I thought that thing was dead forever ago. I remember business booming when I worked computer tech years and years ago when that thing was going around.

There should be instructions all over the place, it was a really huge problem for a lot of people around that time. Hope you got rid of it.

Yeah, my daughter used a PC at her High School Library to work on a paper. She put a data traveler in the USB and brought this sucker home.

I have killed it 4 times now and it keeps coming back, which means I am not really killing it. Everything I have read says symantec is the way to do it and it is what keeps making it stop, but only temporarily so far.

I just ran Symantic and Malwarebytes in safe mode. I also just ran a disk cleanup and am now running a disk defrag. When that is done I am going to run a check disk.

The firewall is turned on.

Windows updates is turned on.

I can't imagine how this sucker keeps coming back.

 

[TheCount]

Yeah, my daughter used a PC at her High School Library to work on a paper. She put a data traveler in the USB and brought this sucker home.

I have killed it 4 times now and it keeps coming back, which means I am not really killing it. Everything I have read says symantec is the way to do it and it is what keeps making it stop, but only temporarily so far.

I just ran Symantic and Malwarebytes in safe mode. I also just ran a disk cleanup and am now running a disk defrag. When that is done I am going to run a check disk.

The firewall is turned on.

Windows updates is turned on.

I can't imagine how this sucker keeps coming back.

There may be an updated version of it, when we were dealing with it, there was a program that did all the work for you and you just had to restart.

I think it was the Windows Malicious Software Removal Tool, try searching for that perhaps?

Could be that they've updated the worm since then and the old tools won't work, but it's worth a shot. We didn't use anti-virus software to try and remove it once infected, that's for sure, usually caused more problems than it solved.

 

[DallasEast]

Actually, I've been finding it isn't as good as it's reputation. (not sure where the good rep has come from)

It misses a lot of viruses. I recommend going with something better.

All I know is that about a year ago, I waited three weeks for Avast! to locate and remove an obvious virus on my computer. It had done an excellent job for me up to the point for about three years. I downloaded MSE, deleted Avast! ran MSE, found the culprit on the first scan and have been using MSE ever since.

 

[YosemiteSam]

All I know is that about a year ago, I waited three weeks for Avast! to locate and remove an obvious virus on my computer. It had done an excellent job for me up to the point for about three years. I downloaded MSE, deleted Avast! ran MSE, found the culprit on the first scan and have been using MSE ever since.

I wasn't advocating Avast.

 

[BrAinPaiNt]

I wasn't advocating Avast.

Hard for me to say this, but I have also found MSE to do a pretty decent job for a free program.

It has found things that Symantec, avast and even malware bytes have missed.

Is it the be all end all? Of course not, but it has done a decent job IMO. Esp for a freebie program.

 

[Hostile]

I have now tried everything mentioned in this thread.

None of it has worked.

 

[DallasEast]

I have now tried everything mentioned in this thread.

None of it has worked.

Do you have a shotgun? SHOOT IT!!!

Just kidding. A radical solution would be to reformat the computer back to its factory specs. It's not a 100% guarantee that the worm will be erased from the computer's hard drive though.

Do you have the operating disks which came with the computer? I would not advise doing a reformat unless it was a last resort, but ...

 

[ajk23az]

Defragging won't remove a virus. What usually works for me is installing avast antivirus and scheduling a boot time scan so that the virus can't activate when windows starts up.

 

[YosemiteSam]

I have now tried everything mentioned in this thread.

None of it has worked.

Formatting and reinstalling Windows should do it.