Blaster worm

[dr_perfecta]

Hi every1
i'm glad to be back.

as we all heard these days about the W32 BLASTER WORM a real threat to windows xp........
to know more about it plz click on
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/virus/alerts/msblaster.asp (http://http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/virus/alerts/msblaster.asp)

to protecect ur computer microsoft released a program to help to downlaod first choose the language of ur windows then click on donlaod the program is at http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

[Asultan]

Thanks Doc..!:LL:
And I'd like to add something..

U can fix and remove this virus from ur computer by fallowing these steps..

1- click Start(أبدأ) ----choose Run (تشغيل) ---- write this (Services.msc)

2- It will appear this page as showing in pictuer 1. Then, In between these services u find this srevice ( Remote Procedure Call (RPC)).

3- When u find this service click on it by the left button of the mouse and choose (properties) as showing in pictuer 1.

4- Choose (Recovery) as showing in picuter 2 and change all response from (Restat The Computer) to (Take on action) as showing in pictuer 2and3. Then click OK and restart ur computer.

* I used this procedure on my brother's computer and its work and successful 100%. So If it doesn't work with, u can download the Patch witch dr_perfecta mentioned about.


Thank u.. :LL:

[H@SSOOM]

thanx

I've dawn loaded the file of microsoft and I made set up 4 it


the problem has gone but the norton anti virus still telling me that there is a virus on my computer called W32 BLASTER WORM



dear Asultan


should I do ur steps if I have run that file already????



I couldn't find this srevice ( Remote Procedure Call (RPC)).
on my computer

[dr_perfecta]

Hi

hassoom the symnatic security response gave manual removal instruction at http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html#removalinstructions

it nearly the same as Asultan says with some detailes

[dr_Lord]

Thanx alot dr_perfecta & Asultan for the solution.. I tried it befor and it worked with me.

I was about to write the solution in the forum but I had no time but now you did guys and we appretiat that for you.

Thanx again

[Asultan]

U r welcome Doc..!

:hp:

[reda0007]

:787: :787: :787:

thank u yahoooo thank u

thanks dr perfecta , asultan , hassom



u know , i got that virus at my new laptop about 5 days ago ,
u know i hated my pc and i got misearible

everytime restart :aa:


i hate viryses proggrammer :MM:


thank u guys again i got the solution now
and iam sure that many members have got that bothering virus .

salam

[dr_perfecta]

ur most welcom evrybody


this virus is attacking mostly the personal computers.... meaning ours :O:

it's really a problem that drive you crazy the computer is shuting down evry 5 minutes

http://www.rose-ksa.com/Image1.jpg



we all should be protected even the ones whonot yet having the proplem should do either the ways to downlaod the removal tool or to try the manual way that mentioned by Asultan or do both

Hassoom if ur antivirus still giving u alert alarms plz try this
program (http://securityresponse.symantec.co...er/FixBlast.exe)
from norton and do what it says then tell us the results

[H@SSOOM]

thanx dr perfecta 4 ur great efforts


yes the norton anti virus is still bothering me evry time and it gives me no choice except ( ok ) button


I usualy pres Alt + ctrl + delete and cancle the norton's job

I think it is better to un inistall it



I tried ur file in ur last post but the file is not working

this message appears every time

Problem Report
The system detected an Unresolved Host Name while attempting to resolve the host specified in the requested URL.

Message ID
UNRESOLVED_HOSTNAME

Problem Description
DNS resolution failure encountered.

Possible Problem Cause
The host entered has a mistake, or the requested Web site is temporarily unavailable in DNS.

Possible Solution
Examine or correct any mistakes, or try again at a later time.




please make sure that the link u have posted is correct

or attach the file itself directly to the forum if u don't mind without a link.



thanx dr perfecta :hp:

[dr_perfecta]

Hye

sory about the link the correction is

http://securityresponse.symantec.com/avcenter/FixBlast.exe


Save the file to a convenient location, such as your downloads folder or the Windows Desktop (or removable media that is known to be uninfected, if possible).


-Double-click the FixBlast.exe file to start the removal tool.
Click Start to begin the process, and then allow the tool to run.


--------------------------------------------------------------------------------
Note: If, when running the tool, you see a message that the tool was not able to remove one or more files, run the tool in Safe mode. Shut down the computer, turn off the power, and wait 30 seconds. Restart the computer in Safe mode and then run the tool again. All the Windows 32-bit operating systems, except Windows NT, can be restarted in Safe mode. For instructions, read the document "How to start the computer in Safe Mode."
--------------------------------------------------------------------------------


-Restart the computer.
-Run the removal tool again to ensure that the system is clean.
If you are running Windows XP, then re-enable System Restore.
Run LiveUpdate to make sure that you are using the most current virus definitions.

When the tool has finished running, you will see a message indicating whether W32.Blaster.Worm infected the computer. In the case of a worm removal, the program displays the following results:
*Total number of the scanned files
*Number of deleted files
*Number of terminated viral processes
*Number of fixed registry entries


it may not work but U can give it a try


finally for windows 2000 profotional users U can downlaud the pach at http://securityresponse.symantec.com/avcenter/FixBlast.exe


then after that make setup for it then runit

after that you can downlaod the pach at
http://www.microsoft.com/downloads/details.aspx?FamilyID=c8b8a846-f541-4c15-8c9f-220354449117&displaylang=en

[RoSa]

<center>
Thank you so much for this thread... Really I was so happy when I saw it because I faced same problem on my cousin PC...
Thaaaank you again...

Regards..

[dr.dragon]

thx everybody




really when i try to read this post i enjoyed 2much




know you why



cz i feelt thats we are such brothers




trying to help each others






Really i wanna thanks every one who post here