| Question:
How to remove the W32.Blaster.Worm for your home computer(s)? |
| Answer: |
Removal Instructions for the W32.Blaster.Worm for your home computer(s):
W32.Blaster.Worm is a virus that exploits a vulnerability in Windows XP,Windows 2000, and Windows NT 4.0.
Please note, that Windows 98 and Windows ME computers are not in danger of becoming infected.
1. If your computer shows no signs of infection, in any case we suggest you simply install the patch, which you can get here:
"P:SoftwareBlastPatch...". Copy the appropriate file (depends on your operating system) into a floppy disk and install it in your home computer.
The signs of infection include:
- your computer restarts in every minute or so;
- you receive errors that say svchost.exe has crashed;
- you are not able to copy or paste text in many applications.
2. The "P:SoftwareBlastPatchFixBlast.exe" utility will allow you to check your home computer for the Blaster Worm virus. If you think you may already have the virus, save the file into a floppy disk and run it in your computer at home.
If Windows reboots before you are able to make any of the changes, Windows XP/2000 users will need to disable the reboot option for RPC failure with the following steps:
· Open your Control Panel and click on Administrative Tools
· Select Services and click on it
· Double click Remote Procedure Call (RPC) from the list in the right window
· Select the Recovery tab
· Set all failure settings to TAKE NO ACTION
· Click OK to close the (RPC) settings, exit Services and close the Control Panel
· restart the computer to allow the new settings to take effect
Before you run the utility, we recommend that you disable the System Restore option that is available in Windows XP. To disable System Restore:
· Right-click on MY COMPUTER and select PROPERTIES.
· When the System Properties Window appears, select the System Restore tab and check the box that says, "Turn off System Restore on all drives."
· Click OK
· When you are asked if you really want to disable System Restore, and lose all past restore points, click YES.
Reboot your computer and run the FixBlast utility that you saved to your computer. Click START to scan your computer for the Blaster virus. This may take several minutes. It scans every file on your computer, so it can take more than ten minutes if you have many gigabytes of data.
3. If all goes well, you will receive a message saying that the virus was either removed or not found on your computer. Click OK. (NOTE: If you have the virus, your computer may reboot before the utility completes. In most cases the virus is removed, but it is recommended that you run the utility again to make sure your system is clean.)
4. After the FixBlast utility finishes ,please don't forget to install the patch for the vulnerability, which you supposed to have on a diskette (see para#1).
5. Re-enable System Restore before restarting your computer with the following steps:
· Right-click on MY COMPUTER and select Properties
· When the System Properties Window appears, select the System Restore tab and remove the check from the box that says, "Turn off System Restore on all drives."
· Click OK
· You will need to restart your system for all changes to take effect.
|
|
