How do I manually clean out MSBlast?

Chaos Angel · Post by **Chaos Angel** » Tue Sep 02, 2003 1:26 am

Ok. About a week and a half ago, I got MSBlast. I know this because my virus checker popped up saying that it found a virus in the file msblast.exe, and gave the entire file path. No problem, right? I go there, delete it, and empty the recycling bin, destroying it.

No problem, right?

Wrong.

Now, my computer randomly freezes up with no warning. It just stops right in the middle of whatever I'm doing. It's getting annoying to have to restart my computer so frequently. Someone said it may be heat problems, but this didn't happen before I got MSBlasted, and I've made no changes to my hardware layouts since then. Any thoughts on how I can clean this bitch out once and for all?

BTW, the Symantec FixBlast thing doesn't find any problem, so it's no help at all.

Aetherfukz · Post by **Aetherfukz** » Tue Sep 02, 2003 1:42 am

Well I had Blaster too, a few weeks ago. Just go to www.symantec.com and search for Blaster, then you will find a removal tool in the first links.
Start it and voila, there goes the worm

skanks · Post by **skanks** » Tue Sep 02, 2003 2:38 am

Hadn't had a chance to pick a fight with the worm in person yet.
Girlfriend had it and I got her to download a few files to kill it aswell and enable her windows XP firewall.

http://mirror.aarnet.edu.au/pub/microso ... 86-ENU.exe
its a hot fix for windows XP

http://www.wn.com.au/nic/FixBlast.exe
its a fix that was recommended.

btw I was also told;
You know you have it when a window pops up telling you something has crashed, and the computer will be restarted in 60 secs or so. (to stop this, run cmd.exe , then type shutdown /a

my g/f's machine isn't playing up as far as I know but I haven't checked over it myself. Hope some of that stuff helps

Chaos Angel · Post by **Chaos Angel** » Tue Sep 02, 2003 10:07 am

As I already SAID, the FixBlast utility does not work for me because the primary MSBlast file was already deleted, but I am convinced that there are some smaller secondary files around that are giving me crap, but my virus and spyware detectors don't pick them up, and neither does FixBlast. I think I need to manually go into folders and remove them, and I need someone to point me where I need to go.

dokidoki · Post by **dokidoki** » Tue Sep 02, 2003 11:30 am

Various links:
http://securityresponse.symantec.com/av ... .worm.html
(more info than just "here's fixblast!")
http://hardware-hq.com/blaster.php
http://www.worm-blaster.com/
http://www.rentacoder.com/vb/scripts/Sh ... 1&lngWId=3

I'd start by backing up your registry and removing the keys it puts in.

Chaos Angel · Post by **Chaos Angel** » Tue Sep 02, 2003 12:44 pm

One of the links told me how to check the registry, but I didn't find anything (or more accurately, nothing labeled as either MSBlast or as Windows Auto Update like the site said it would be if it was there.)

Timelessblurr · Post by **Timelessblurr** » Tue Sep 02, 2003 1:29 pm

This thing about the Mblaster virus just goes to show you how few people keep there windows Uptodate since that hole it was using was a few month old

MrScribble · Post by **MrScribble** » Tue Sep 02, 2003 2:57 pm

Try making a fake MSblast.exe

Just copy one of your gamefiles or something and rename it.

Lyrs · Post by **Lyrs** » Tue Sep 02, 2003 4:10 pm

If you can't get on to the net (which in this case you were able to), try the crt+alt+del routine and look for a 'suspicious" running program. Manually stop the worm.