[CrazyAzorean]

Anyone can help me, i want to eliminate the "msblast" from my Pc (not the one i'm using now)
because of him i can't get on-line.
Any sugestions, E-mail them to marct@iol.pt

[zerodamage]

Well the first thing you need to do is disable DCOM before the 60 seconds is up. I do that by going to GRC.com and downloading the Dcombobulator program. It fits on a floppy and you can do it as soon as XP or Win2k boots up. Then reboot and go to Symantecs site and get the msblast removal tool.

As soon as that is done, go to WINDOWS UPDATE and update your windows.

[Dyre Straits]

Hi,

You'll have to post more about that computer....

What OS? for instance.

Also, Feedback isn't the correct post for this type of question. Better to ask it in the Technical forum.

[CrazyAzorean]

windows XP pro

[Davidgt]

If you turn on winxp firewall It disables DCOM then go to windows update get all the updates thenreboot disable windows firewall

[Davidgt]

or just grab this

http://securityresponse.symantec.com...r/FixBlast.exe

notes:

Download the FixBlast.exe file from:

http://securityresponse.symantec.com...r/FixBlast.exe



Save the file to a convenient location, such as your downloads folder or the Windows Desktop (or removable media that is known to be uninfected, if possible).
To check the authenticity of the digital signature, refer to the section, "Digital signature."
Close all the running programs before running the tool.
If you are running Windows XP, then disable System Restore. Refer to the section, "System Restore option in Windows Me/XP," for additional details.


CAUTION: If you are running Windows XP, we strongly recommend that you do not skip this step. The removal procedure may be unsuccessful if Windows XP System Restore is not disabled, because Windows prevents outside programs from modifying System Restore.
--------------------------------------------------------------------------------


Double-click the FixBlast.exe file to start the removal tool.
Click Start to begin the process, and then allow the tool to run.


--------------------------------------------------------------------------------
Note: If, when running the tool, you see a message that the tool was not able to remove one or more files, run the tool in Safe mode. Shut down the computer, turn off the power, and wait 30 seconds. Restart the computer in Safe mode and then run the tool again. All the Windows 32-bit operating systems, except Windows NT, can be restarted in Safe mode. For instructions, read the document "How to start the computer in Safe Mode."
--------------------------------------------------------------------------------


Restart the computer.
Run the removal tool again to ensure that the system is clean.
If you are running Windows XP, then re-enable System Restore.
Run LiveUpdate to make sure that you are using the most current virus definitions.

When the tool has finished running, you will see a message indicating whether W32.Blaster.Worm infected the computer. In the case of a worm removal, the program displays the following results:
Total number of the scanned files
Number of deleted files
Number of terminated viral processes
Number of fixed registry entries

[CrazyAzorean]

thanks for your help, i'll try it tomorrow
:d

[zerodamage]

Well remember as long as you have that msblast on your computer and you are online with it, you are infecting other computers on the net. I encourage you to keep it off until you are ready to remove msblast.

[The_Neon_Cowboy]

This is why you should either turn auto updating or visit the windows update website religiously.