UPDATE : unable to remove W32.Baster

[David H. Lipman]

Microsoft Knowledge Base Article - 833330
A tool is available to remove Blaster worm and Nachi worm infections from computers that are
running Windows 2000 or Windows XP

http://support.microsoft.com/?kbid=833330

Dave



"A Brown" > wrote in message
...
| Well, I got blaster virus in my system today. But I am unable to stop or
| remove it.
|
| When I click ctrl+Alt+Del to get to Windows Task manager, there is NO
| MSBlast or anything like it in the "Process".
| However, in the "Application" there is a "System Shutdown". I am unable to
| stop it by "end process".
| I ran the Symantec's fixblast.exe tool 1.0.6.1 and it did NOT find the
| virus.
| I ran the Microsoft W32.MSBlaster patch, it did NOT fix or stop the virus.
| I run services.msc and found "Remote Recovery Call (RPC)"., but I when I
| right click, no "properties".
| I am able to start this RPC, but the Blaster still keep ticking.
|
| When I boot from XP CD disc to recovery console, I am unable to access any
| other folder such as "Documents and Settings" to look or remove for this
| virus. Can you tell me where and how?
|
| Appreciate your help.
|
|