Blaster hit my XP

  • Thread starter Thread starter Howard I
  • Start date Start date
H

Howard I

I have an E Machines desktop running OEM XP Home. I was
hit by Blaster, updated and ran McAfee VirusScan Pro.
McAfee identified the msblast.exe and TFTP560, both within
the Windows/System32 folder. McAfee proceeded to delete
the files. I ran the MS patch for XP afterwords, but
still am not able to access the web. I continue to get
DNS error through Explorer.

Other than restoring my operating system with the CD that
came with my machine, what can I do to get operational
again? (I have tried restoring to a prior restore point,
but this has not helped to solve the problem.)

Thanks
 
The Blaster worm does not disable your ability to view webpages as far as I
know. Go to START--->RUN and then type "CMD" at the command prompt window
type "IPCONFIG /ALL" then hit enter. Make sure your internet connection
has a default gateway and you show atleast one DNS server listed.

Thanks,
Steve Good
 
See below.
-----Original Message-----
I have an E Machines desktop running OEM XP Home. I was
hit by Blaster, updated and ran McAfee VirusScan Pro.
McAfee identified the msblast.exe and TFTP560, both within
the Windows/System32 folder. McAfee proceeded to delete
the files. I ran the MS patch for XP afterwords, but
still am not able to access the web. I continue to get
DNS error through Explorer.

Other than restoring my operating system with the CD that
came with my machine, what can I do to get operational
again? (I have tried restoring to a prior restore point,
but this has not helped to solve the problem.)

Thanks
.
Click to expand...

Please perform the following steps:

1) On another computer with a 1.44MB floppy download the
FixBlast.exe tool from Symantec
(http://securityresponse.symantec.com/avcenter/venc/data/w
32.blaster.worm.removal.tool.html). Save the download to
floppy.
2) Once saved, go to Microsoft's site and download the
patch for the worm
(http://www.microsoft.com/downloads/details.aspx?
FamilyID=2354406c-c5b6-44ac-9532-
3de40f69c074&displaylang=en) again onto your floppy.
3) Go back to your WinXP machine.
4) Go to Control Panel, Performance & Maintenance, and
System. Under the System Restore tab, turn off System
Restore.
5) With System Restore off, insert the floppy disk and
first run the Symantec tool. This will take 20+ minutes
depending on the number of files you have. The tool will
wipe out the worm by repairing your registry, cleaning
files and removing the msblast.exe file from your \%
windir%\system32 folder.
6) After the system has been cleaned, again from the
floppy, install the system patch from Microsoft.
7) Remove the floppy and restart you computer. Your
system should be clean. Turn System Restore back on.

Its important to turn off System Restore BEFORE wiping
ang patching your system. Why? If you were to perform a
restore at any point, you'll be restoring the virus.

Perform again if the problem persists. If that doesn't
work, back up your files and read McAffe's detailed
directions on manually removing the files. Remember,
manipulating the Windows registry is serious business.
Any mistake could disable your computer!

That's all I can think of. This procedure worked for my
Uncle-in-Law's PC. I use Symantec's Norton Antivirus at
work, which is why I suggest that you use their cleaning
tool. I'm sure that McAfee has one too, but I KNOW from
experience that Symantec's will work.

Good Luck,

GH
 
Back
Top