The blaster worm

[Sharon]

I am running windows xp and picked up the blaster worm.
I have turned on the firewall and run my norton antivirus
scan as instructed. Norton scans, finds and quaranteens
the worm but I cannot delete as instructed. Norton posts
a pop up reminder everytime I turn on my computer and
while everything seems to be running Ok It is always
there. I have been hiding it behind my start bar. Any
suggestions?

[Dragon]

hi Sharon, go into norton and go to reports, in the reports should be
quarantine at the top double click on view reports and it will show you a
screen with quarantined items which should say one next to it or possibly
backup items should say one. right click on the file and click delete at
the top. that should do the trick. also make sure you have done a windows
update for all the latest updates that stops it coming back

cheers Dave


"Sharon" > wrote in message
...
> I am running windows xp and picked up the blaster worm.
> I have turned on the firewall and run my norton antivirus
> scan as instructed. Norton scans, finds and quaranteens
> the worm but I cannot delete as instructed. Norton posts
> a pop up reminder everytime I turn on my computer and
> while everything seems to be running Ok It is always
> there. I have been hiding it behind my start bar. Any
> suggestions?

[Rick \Nutcase\ Rogers]

Hi Sharon,

You can't delete it while it's in use. You must follow the complete steps to
disable the bug from loading. Information:

http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=823980

Problem is, you needed to install the patch BEFORE you got infected to avoid
it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
http://mvp.support.microsoft.com/
Associate Expert - WinXP - Expert Zone
www.microsoft.com/windowsxp/expertzone
Win98 Help - www.rickrogers.org

"Sharon" > wrote in message
...
> I am running windows xp and picked up the blaster worm.
> I have turned on the firewall and run my norton antivirus
> scan as instructed. Norton scans, finds and quaranteens
> the worm but I cannot delete as instructed. Norton posts
> a pop up reminder everytime I turn on my computer and
> while everything seems to be running Ok It is always
> there. I have been hiding it behind my start bar. Any
> suggestions?

[Kelly]

Hi Sharon,

Run this script:

Close Windows Explorer, run the edit on line 257 which includes the prompt
for the patch once your system has been cleaned. This script removes all
variants of the W32.Blaster.Worm (original, b and c) and will inform you
whether or not the patch is already installed.
http://www.kellys-korner-xp.com/xp_tweaks.htm. Direct download:
http://www.kellys-korner-xp.com/regs_edits/msblast.vbs

Correct the Cryptographic Service Error Message (Line 266)
http://www.kellys-korner-xp.com/xp_tweaks.htm

Prevent Prompting for Hotfix KB823980 (Line 266)
http://www.kellys-korner-xp.com/xp_tweaks.htm

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com
http://www.kellys-korner-xp.com/xp_abc.htm
http://www.kellys-korner-xp.com/xp_tweaks.htm

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Sharon" > wrote in message
...
> I am running windows xp and picked up the blaster worm.
> I have turned on the firewall and run my norton antivirus
> scan as instructed. Norton scans, finds and quaranteens
> the worm but I cannot delete as instructed. Norton posts
> a pop up reminder everytime I turn on my computer and
> while everything seems to be running Ok It is always
> there. I have been hiding it behind my start bar. Any
> suggestions?