removal tool for a w32 worm blaster

---

Clarification of Question by tony9114-ga on 03 Apr 2004 13:45 PST

w32 worm blaster removal tool

---

Request for Question Clarification by scriptor-ga on 03 Apr 2004 13:48 PST

What is your question?

Scriptor

---

Clarification of Question by tony9114-ga on 03 Apr 2004 14:07 PST

i have a w32 worm blaster in my comput. & want to know how to get rid of it

Hi tony9114,

Here you go - 

SYMANTEC
W32.Blaster.Worm Removal Tool: Last Updated on: April 1, 2004 04:50:15 PM GDT:
"The W32.Blaster.Worm Removal Tool does the following:
   1. Terminates the W32.Blaster.Worm viral processes.
   2. Deletes the W32.Blaster.Worm files.
   3. Deletes the dropped files.
   4. Deletes the registry values that have been added."
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

Good luck! If you have any questions, please post a clarification
request before closing/rating my answer.

Thank you,
hummer

Google Search Terms Used:
w32 worm blaster removal tool

---

Clarification of Answer by hummer-ga on 05 Apr 2004 03:18 PDT

Hi tony9114,

You'll find instructions for windows XP (including how to stop the
computer from shutting off) at the following links.

Trend Micro:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MSBLAST.GEN

"Windows Millennium Edition (ME) and Windows XP have a feature known
as System Restore, which creates backups of certain files in the
_Restore folder. The System Restore feature usually backs up files
with EXE or COM extensions, which may include infected files and
malware programs. Files in the _Restore folder are protected and can
only be accessed using System Restore. This feature must be disabled
first before Trend Micro antivirus can access and clean these files."
http://www.trendmicro.com/en/security/advisories/win_me_clean.htm

Steps to recover from W32/Blaster: Notes:
"It is possible to stop the shutdown process by typing the following
at a command prompt: shutdown -a"
http://www.cert.org/tech_tips/w32_blaster.html#notes

Thank you to albertacomputers for his comment.

Regards,
hummer

You may find that this answer, though technically answers your
question won't solve your problem.  Blaster Worm and its new dozens of
variants exploit a hole in windows XP.  Doing your windows updates
will close the hole if you can get them downloaded before it turns
your computer off.   The best thing to do is get the machine behind a
router.  If you ever install windows XP without a router or firewall
you'll more than likely get blaster in less than 10 minutes. 
Antivirus programs won't protect against blaster.  You need to remove
it AND DO YOUR UPDATES.  (in explorer click tools, windows update)
Otherwise you'll be back to square 1