1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Blasted MSblaster how to remove it?

Discussion in 'Virus & Other Malware Removal' started by darkelf_18, Apr 13, 2004.

Thread Status:
Not open for further replies.
Advertisement
  1. darkelf_18

    darkelf_18 Thread Starter

    Joined:
    Jul 26, 2003
    Messages:
    509
    I built my dad a new PC and stuck XPpro on it. And he got the msblaster virus, I thought I had the right program to fix it (Fixblast.exe from symantec.com) But I guess I was wrong, cause the morning after I ran Fixblast he got it again. Wasn't there some patch from MS that I had to install also? If so could you post a link to the site?
    Thanks,
    D.E_18
     
  2. $teve

    $teve

    Joined:
    Oct 9, 2001
    Messages:
    9,396
    Depending on the O/S
    http://www.microsoft.com/downloads/...8b-fe98-493f-ad76-bf673a38b4cf&displaylang=en

    An uptodate A/V program would help prevent reinfection.

    If you want to post an HijackThis log we will take a look.

    Do this:
    go to http://www.lurkhere.com/~nicefiles/ , and download 'Hijack This!'.....
    Unzip it to its own folder, doubleclick HijackThis.exe, and hit "Scan".

    When the scan is finished, the "Scan" button will change into a "Save Log" button.
    Press that, save the log somewhere, and please copy & paste its contents to the forum.

    It will possibly show other issues deserving our attention, but most of what it lists will be harmless or even required, so do NOT fix anything yet.
    Someone here will be happy to help you analyze the results.

    If you have anything disabled by MSConfig or any other startup manager, please re-enable it before scanning to post.

    ;)
     
  3. Grinler

    Grinler Malware Specialist

    Joined:
    Mar 10, 2004
    Messages:
    103
    There is a program that you can use called Fixblast by symantec that should get rid of msblaster for you.

    The file can be found here:
    Fixblast.exe

    Just saw, that you already downloaded that and ran it. Run it again and then immediately run windowsupdate after you remove blaster by going here:

    http://www.windowsupdate.com

    Download all the security updates and install them.

    That will prevent msblaster from exploiting the rpc/dcom exploit.
     
  4. darkelf_18

    darkelf_18 Thread Starter

    Joined:
    Jul 26, 2003
    Messages:
    509
    I had the virus on my PC and I used two programs to 1. remove it and 2. keep it from coming back. I didn't use windows update to do it either. And since I have Dial up I do not want to update unless I absolutly have to. I know there was something I could DL that would stop the virus but I can't remember what.
     
  5. $teve

    $teve

    Joined:
    Oct 9, 2001
    Messages:
    9,396
    The link i posted has both the removal tool AND the MS updates.
    ;)
     
  6. darkelf_18

    darkelf_18 Thread Starter

    Joined:
    Jul 26, 2003
    Messages:
    509
    Hey $teve. I didn't know that the link contained both of those. I actually found the stuff I need a minute or so ago. So I am DLing the stuff know and will hopefully get it fixed right after that.
    Thanks,
    D.E_18
     
  7. $teve

    $teve

    Joined:
    Oct 9, 2001
    Messages:
    9,396
    No problem(y)
     
  8. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/219957

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice