Last week I upgraded my Norton Internet Security and ran Live Update to get all the new stuff. It immediately found W32.Blaster.Worm. Norton says "Unable to repare the file" and "Access denied". It is in Windows\system32\msblast.exe. Cannot I delete this file. It is the driver for the sound card isn't it? If I delete it can I then download the file from the internet? I don't want to delete the file and have my computer crash. What bugs me is that I have all the newest Norton and it still can't do anything with this worm. Can anyone help me? Peggy
OT Need help from one of our tech people
Sep 16, 2003
4 Replies
You NEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEED to get your windows updated. You can't just remove the worm. You HAVE to do the updates!!!! Best way to do that is when you're on the internet open INTERNET EXPLORER, click on tools, and then windows updates. follow the prompts.
after that you'll need to download the fixblast.exe from
formatting link
're gonna want to save it to your desktop)then restart your system get into SAFE MODE (hit the F8 key a few times after it beeps or when it says STARTING WINDOWS XX) click on the fixblast.exe icon on your desktop and it will remove the worm. then restart your system again into normal mode... TAAADDAAAAAAA you're all fixed. BrattBoy
MargaretEckbold wrote:
I had the same problems with the worm (except that I knew I had it because it kept shutting down my machine!) I updated my Norton Antivirus and got the patch but I STILL had the worm. I finally found my way to the Symantec site that Bratt linked to and was able to rid my computer of this worm. It works! Yeah!! Barbara
formatting link
> (you're gonna want to save it to your desktop)> then restart your system get into SAFE MODE (hit the F8 key a few times> after it beeps or when it says STARTING WINDOWS XX) click on the> fixblast.exe icon on your desktop and it will remove the worm. then> restart your system again into normal mode... TAAADDAAAAAAA you're all > fixed.>
Windows\system32\msblast.exe.
Barbara.. make sure you've got all the windows updates (not norton's) on the system... otherwise you still have the ability to get the worm. WHAT the deal is on windows NT, 2000, and XP there are ports that are left open which the worm attacks. Once you get the updates the security feature in one of them will close those open ports therefore not allowing the worm to infect the system. if you haven't done this you will need to and go through the steps of the fixblast.exe again.
It's been a pain in the but for ISPs. We've been thinking accounts here that if they're contacted twice we're closing them if they do not go through the steps to remove the worm off their systems. If ISPs need to go through this to stop this worm, we gotta do what we gotta do.
Hopefully this will help the rest of you get this stupid worm off your systems.
BrattBoy
Barbara wrote:
If one uses Windows XP, you must first disable the Restore feature, and the virus will sit there waiting for your next reboot.... You will lose all of your restore points though.....
JP
MargaretEckbold wrote:
-- "Sorry for the inconvenience, but I've inserted a spam-filter in my email address. When you hit 'reply' to email me, you must "Take out the TRASH...." or your email will bounce back to you..."
Join the Discussion
Have something to add? Share your thoughts — no account required.
Didn't find your answer?
Ask the community — no account required