Laptop infected by W32/Blaster.worm - Acer Extensa 4620 Notebook

Once a network (such as a company or university) was infected, it spread more quickly within the network because firewalls typically did not prevent internal machines from using a certain port. Filtering by ISPs and widespread publicity about the worm curbed the spread of Blaster.
Operating system(s) affected: Windows XP and ...
Port(s) used: Remote Procedure Call
Aliases: Lovsan, Lovesan, MSBlast

Blaster (computer worm) - Wikipedia

https://en.wikipedia.org > wiki > Blaster_(computer_worm)
About featured

Blaster Worm - an overview ' ScienceDirect Topics

https://www.sciencedirect.com > topics > computer-science
Unlike a virus, a worm exploits vulnerabilities in network programs in order to execute and spread. Richard Morris released the worm as an experiment to measure ...

Blaster worm spreading; experts warn of attack ' Computerworld

https://www.computerworld.com > Malware
Aug. 12, 2003 - The worm, referred to alternately as W32.Blaster, the DCOM Worm or Lovsan worm, first appeared on the Internet late yesterday and spread quickly ...

Hi, you can try this program:

http://download.cnet.com/W32-Blaster-Worm-Removal-Tool/3000-2092_4-10219756.html

Try also:

http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=mncol;1

http://www.superantispyware.com/download.html

http://www.sophos.com/support/disinfection/blastera.html

run malwarebytes on safemode...

This page clearly explains the steps to remove the worm: http://deletemalware.blogspot.com/2011/01/how-to-remove-w32blasterworm-uninstall.html

this tells you how to remove it
http://www.symantec.com/security_response/writeup.jsp?docid=2003-081119-5051-99

repeatedly press f8 after youve pushed the power button. this will start your pc in safe mode. click the start menu and in the run box type ( msconfig ) only using the letters m,s,c,o,n,f,i,g. then select the startup tab located at the top center of the popup screen. you will then see a list of items with a check mark located next to each of them or just some of them. unchech each one and then hit apply. you will then be prompted to restart your system. let it startup normally. you will get a prompt telling you your system has been changed to a selective startup. just check the box and choose it not to prompt you again. this should allow you to boot up and use your anti virus program to remove the virus threat.

you will no longer see some of the icons in the lower right hand corner of your screen as a result of unchecking those items, but they will still function properly without any issues.

below , i have included a link that will provide you with a w32/blaster worm removal tool. download the program to your desktopp the doublle click the icon to run the tool. this wiull be extremely helpfull if your AV software is out of date or already corrupted by the worm itself. a blaster worm has the potential to completely disable your current AV program, so id for sure try it first as a definate removal result.

if you need any further assistance in helping you with this , please feel free to contact me via [email protected]


http://download.cnet.com/W32-Blaster-Worm-Removal-Tool/3000-2092_4-10219756.html

If there is w32 blaster worm on your computer, it seems there is not only this worm but also other problems. You can use some anti-virus software such as Kaspersky or Norton to remove the w32 blaster worm. If it doesn't work, reinstall operating system. If you are in emergency and not a computer expert, I suggest you do this by some software. Some software can check your computer health first and report your computer status including software, hardware, security and stability. Then you may follow simple steps to remove all viruses and fix other hidden errors.

Download STINGER antivirus and scan with this tool.

Variants Can Detect:
BackDoor-ALI,BackDoor-AQJ,BackDoor-AQJ.b,BackDoor-CEB,BackDoor-CEB!bat,BackDoor-CEB!hosts,BackDoor-CEB.b,BackDoor-CEB.c,BackDoor-CEB.d,BackDoor-CEB.dll,BackDoor-CEB.dr,BackDoor-CEB.e,BackDoor-CEB.f,BackDoor-CEB.sys,BackDoor-CFB,BackDoor-JZ,BackDoor-JZ.dam,BackDoor-JZ.dr,BackDoor-JZ.gen,BackDoor-JZ.gen.b,Bat/Mumu.worm,Cleanup,CoreFlood,Coreflood!psexec,Coreflood.dldr,CoreFlood.dll,CoreFlood.dr,Danmec,Downloader-DN.a,Downloader-DN.b,Downloader-UA,Exploit-DcomRpc,Exploit-DcomRpc.b,Exploit-DcomRpc.dll,Exploit-Lsass,Exploit-Lsass.dll,Exploit-MS04-011,Exploit-MS04-011.gen,Exploit-MSExcel.k,Exploit-MSExcel.l,Exploit-MSExcel.m,Exploit-MSExcel.n,Exploit-MSExcel.o,Exploit-MSExcel.p,Exploit-MSExcel.q,Exploit-MSExcel.r,Exploit-PDF.b,Exploit-PDF.c,Exploit-PDF.d,Exploit-PDF.e,Exploit-PDF.f,Exploit-PDF.g,Exploit-PDF.h,Exploit-XMLhttp.d,Exploit-XMLhttp.d.gen,Exploit-XMLhttp.d.gen.b,Exploit-XMLhttpd.d,FakeAlert,FakeAlert-AA,FakeAlert-AB,FakeAlert-AB!htm,FakeAlert-AB.dldr,FakeAlert-AB.dr,FakeAlert-AC,FakeAlert-AD,FakeAlert-AE,FakeAlert-AF,FakeAlert-AG,FakeAlert-AG.gen.b,FakeAlert-AG.gen.c,FakeAlert-AH,FakeAlert-AI,FakeAlert-AJ,FakeAlert-AK,FakeAlert-AL,FakeAlert-AM,FakeAlert-AN,FakeAlert-AntiVirusPro,FakeAlert-AntiVirusXP,FakeAlert-AO,FakeAlert-AP,FakeAlert-AQ,FakeAlert-AR,FakeAlert-AS,FakeAlert-AT,FakeAlert-AU,FakeAlert-av360,FakeAlert-AW,FakeAlert-AZ,FakeAlert-AZ!htm,FakeAlert-B,FakeAlert-B.dldr,FakeAlert-B.dr,FakeAlert-BA,FakeAlert-BB,FakeAlert-BC,FakeAlert-BD,FakeAlert-BE,FakeAlert-BE.gen,FakeAlert-BF,FakeAlert-BG.dldr,FakeAlert-BH.dldr,FakeAlert-BI,FakeAlert-BJ,FakeAlert-BK,FakeAlert-BL,FakeAlert-BM,FakeAlert-BN,FakeAlert-BO,FakeAlert-BO.dldr,FakeAlert-BP,FakeAlert-BQ,FakeAlert-BR,FakeAlert-BS,FakeAlert-C,FakeAlert-C.dr,FakeAlert-C.gen,FakeAlert-D,FakeAlert-E,FakeAlert-F,FakeAlert-G,FakeAlert-H,FakeAlert-I,FakeAlert-J,FakeAlert-K,FakeAlert-L,FakeAlert-LastDefender,FakeAlert-M,FakeAlert-N,FakeAlert-N.dldr,FakeAlert-O,FakeAlert-P,FakeAlert-Q,FakeAlert-R,FakeAlert-S,FakeAlert-S.dll,FakeAlert-SpyKiller,FakeAlert-SpywareGuard,FakeAlert-T,FakeAlert-U,FakeAlert-V,FakeAlert-W,FakeAlert-WinwebSecurity,FakeAlert-X,FakeAlert-XPAntivirus,FakeAlert-XPSecCenter,FakeAlert-Y,FakeAlert-Y.dr,FakeAlert-Z,Fribet,Generic FakeAlert,Generic FakeAlert.d,Generic FakeAlert.e,Generic!atr,HideWindow,HideWindow.dll,HTool-T2W,IPCScan,IRC/Flood.ap,IRC/Flood.ap.bat,IRC/Flood.ap.dr,IRC/Flood.bi,IRC/Flood.bi.dr,IRC/Flood.cd,JS/Autorun.worm.ci,JS/Downloader-AUE,JS/FakeAlert,JS/FakeAlert-AB.dldr,NTServiceLoader,ProcKill,Proxy-Agent.af,Proxy-Agent.af.dr,PWS-Banker.dldr,PWS-FireMing,PWS-FireMing.dll,PWS-FireMing.dr,PWS-Gamania.gen.a,PWS-Narod,PWS-Narod.dll,PWS-Narod.gen,PWS-Sincom,PWS-Sincom.dll,PWS-Sincom.dr,rootkit,VBS/Autorun.bj,VBS/Autorun.worm.au,VBS/Autorun.worm.ay,VBS/Autorun.worm.bi,VBS/Autorun.worm.bj,VBS/Autorun.worm.bs,VBS/Autorun.worm.by,VBS/Autorun.worm.ca,VBS/Autorun.worm.cy,VBS/Autorun.worm.dm,VBS/Autorun.worm.dn,VBS/Autorun.worm.dn!atr,VBS/Autorun.worm.dn!txt,VBS/Autorun.worm.dv,VBS/Autorun.worm.dz,VBS/Autorun.worm.en,VBS/Autorun.worm.k,VBS/Autorun.worm.k!bat,VBS/Autorun.worm.zd,VBS/Autorun.worm.ze,VBS/Autorun.worm.zl,VBS/Autorun.worm.zn,VBS/FakeAlert-AB,VBS/IE-Title,Vundo,Vundo.dldr,Vundo.dr,Vundo.gen.h,Vundo.gen.i,Vundo.gen.j,Vundo.gen.k,Vundo.gen.l,Vundo.gen.m,Vundo.gen.n,Vundo.gen.o,Vundo.gen.p,Vundo.gen.r,Vundo.gen.s,Vundo.gen.t,Vundo.gen.u,W32/Anig.worm,W32/Anig.worm.dll,W32/Autorun.worm,W32/Autorun.worm!inf,W32/Autorun.worm!ini,W32/Autorun.worm.a,W32/Autorun.worm.aa,W32/Autorun.worm.ab,w32/autorun.worm.ac,W32/Autorun.worm.ad,W32/Autorun.worm.ae,W32/Autorun.worm.af,W32/Autorun.worm.ag,W32/Autorun.worm.ai,W32/Autorun.worm.aj,W32/Autorun.worm.ak,W32/Autorun.worm.al,W32/Autorun.worm.am,W32/Autorun.worm.an,W32/Autorun.worm.ao,W32/Autorun.worm.ap,W32/Autorun.worm.aq,W32/Autorun.worm.ar,W32/Autorun.worm.as,W32/Autorun.worm.at,W32/Autorun.worm.av,W32/Autorun.worm.aw,W32/Autorun.worm.ax,W32/Autorun.worm.az,W32/Autorun.worm.b,W32/Autorun.worm.b.cfg,W32/Autorun.worm.ba,W32/Autorun.worm.bb,W32/Autorun.worm.bc,W32/Autorun.worm.bd,W32/Autorun.worm.be,W32/Autorun.worm.bf,W32/Autorun.worm.bg,W32/Autorun.worm.bh,W32/Autorun.worm.bk,W32/Autorun.worm.bl,W32/Autorun.worm.bm,W32/Autorun.worm.bn,W32/Autorun.worm.bo,W32/Autorun.worm.bp,W32/Autorun.worm.bp!reg,W32/Autorun.worm.bq,W32/Autorun.worm.br,W32/Autorun.worm.bt,W32/Autorun.worm.bw,W32/Autorun.worm.bx,W32/Autorun.worm.bx!inf,W32/Autorun.worm.bx.gen,W32/Autorun.worm.bz,W32/Autorun.worm.c,W32/Autorun.worm.cb,W32/Autorun.worm.cb.dr,W32/Autorun.worm.cc,W32/Autorun.worm.cd,W32/Autorun.worm.ce,W32/Autorun.worm.cf,W32/Autorun.worm.cg,W32/Autorun.worm.ch,W32/Autorun.worm.cj,W32/Autorun.worm.ck,W32/Autorun.worm.cm,W32/Autorun.worm.cn,W32/Autorun.worm.co,W32/Autorun.worm.cp,W32/Autorun.worm.cp!bat,W32/Autorun.worm.cq,W32/Autorun.worm.cr,W32/Autorun.worm.cs,W32/Autorun.worm.ct,W32/Autorun.worm.cu,W32/Autorun.worm.cv,W32/Autorun.worm.cw,W32/Autorun.worm.cx,W32/Autorun.worm.cz,W32/Autorun.worm.d,W32/Autorun.worm.da,W32/Autorun.worm.db,W32/Autorun.worm.dc,W32/Autorun.worm.dd,W32/Autorun.worm.dd!inf,W32/Autorun.worm.de,W32/Autorun.worm.df,W32/Autorun.worm.dg,W32/Autorun.worm.dh,W32/Autorun.worm.di,W32/Autorun.worm.dj,W32/Autorun.worm.dk,W32/Autorun.worm.dl,W32/Autorun.worm.dn,W32/Autorun.worm.do,W32/Autorun.worm.dp,W32/Autorun.worm.dq,W32/Autorun.worm.ds,W32/Autorun.worm.dt,W32/Autorun.worm.du,W32/Autorun.worm.dw,W32/Autorun.worm.dx,W32/Autorun.worm.dy,W32/Autorun.worm.e,W32/Autorun.worm.ea,W32/Autorun.worm.eb,W32/Autorun.worm.ec,W32/Autorun.worm.ed,W32/Autorun.worm.ef,W32/Autorun.worm.eg,W32/Autorun.worm.ei,W32/Autorun.worm.ej,W32/Autorun.worm.ek,W32/Autorun.worm.el,W32/Autorun.worm.em,W32/Autorun.worm.eo,W32/Autorun.worm.ep,W32/Autorun.worm.eq,W32/Autorun.worm.f,W32/Autorun.worm.g,W32/Autorun.worm.gen!job,W32/Autorun.worm.gen.cl,W32/Autorun.worm.gen.za,W32/Autorun.worm.gen.zb,W32/Autorun.worm.h,W32/Autorun.worm.h!lnk,W32/Autorun.worm.i,W32/Autorun.worm.j,W32/Autorun.worm.l,W32/Autorun.worm.m,W32/Autorun.worm.n,W32/Autorun.worm.o,W32/Autorun.worm.p,W32/Autorun.worm.q,W32/Autorun.worm.r,W32/Autorun.worm.remmants,W32/Autorun.worm.s,W32/Autorun.worm.t,W32/Autorun.worm.u,W32/Autorun.worm.v,W32/Autorun.worm.v!bat,W32/Autorun.worm.w,W32/Autorun.worm.x,W32/Autorun.worm.y,W32/Autorun.worm.z,W32/Autorun.worm.zc,W32/Autorun.worm.zf,W32/Autorun.worm.zg,W32/Autorun.worm.zh,W32/Autorun.worm.zi,W32/Autorun.worm.zj,W32/Autorun.worm.zk,W32/Autorun.worm.zm,W32/Bagle,W32/Bagle!eml.gen,W32/Bagle!pwdzip,W32/Bagle.ad!src,W32/Bagle.dldr,W32/Bagle.dll.dr,W32/Bagle.eml,W32/Bagle.fb!pwdzip,W32/Bagle.fc!pwdzip,W32/Bagle.fd!pwdzip,W32/Bagle.fe!pwdzip,W32/Bagle.fm.dldr,W32/Bagle.gen,W32/Bagle@MM!cpl,W32/Blaster.worm,W32/Blaster.worm.k,W32/Bropia.worm,W32/Bugbear,W32/Bugbear.a.dam,W32/Bugbear.b!data,W32/Bugbear.b.dam,W32/Bugbear.gen@MM,W32/Bugbear.h@MM,W32/Bugbear@MM,W32/Conficker,W32/Conficker.sys,W32/Conficker.worm,W32/Conficker.worm!inf,W32/Conficker.worm!job,W32/Conficker.worm.gen.a,W32/Conficker.worm.gen.b,W32/Deborm.worm.ah,W32/Deborm.worm.gen,W32/Doomjuice.worm,W32/Dumaru,W32/Dumaru.ad@MM,W32/Dumaru.al.dll,W32/Dumaru.dll,W32/Dumaru.eml,W32/Dumaru.gen,W32/Dumaru.gen@MM,W32/Dumaru.w.gen,W32/Elkern.cav,W32/Elkern.cav.c,W32/Elkern.cav.c.dam,W32/Fizzer,W32/Fizzer.dll,W32/Fujacks!htm,W32/FunLove,W32/FunLove.apd,W32/Gaobot.worm,W32/Harwig.worm,W32/IRCbot,W32/IRCbot.worm,W32/IRCbot.worm.dll,W32/Klez,W32/Klez.dam,W32/Klez.eml,W32/Klez.gen.b@MM,W32/Klez.rar,W32/Koobface.worm,W32/Korgo.worm,W32/Lirva,W32/Lirva.c.htm,W32/Lirva.eml,W32/Lirva.gen@MM,W32/Lirva.htm,W32/Lirva.txt,W32/Lovgate,W32/Mimail,W32/Mimail.c@MM,W32/Mimail.i!data,W32/Mimail.q@MM,W32/MoFei.worm,W32/MoFei.worm.dr,W32/Mumu.b.worm,W32/Mydoom,W32/Mydoom!bat,W32/Mydoom!ftp,W32/Mydoom.b!hosts,W32/Mydoom.dam,W32/Mydoom.t.dll,W32/Mytob,W32/Mytob.gen@MM,W32/Mytob.worm,W32/MyWife,W32/MyWife.dll,W32/MyWife@MM,W32/Nachi!tftpd,W32/Nachi.worm,W32/Netsky,W32/Netsky.af@MM,W32/Nimda,W32/Nimda.dam,W32/Nimda.eml,W32/Nimda.gen@MM,W32/Nimda.htm,W32/Nuwar,W32/Nuwar.dam,W32/Nuwar.sys,W32/Nuwar@MM,W32/Nuwar@MM!rar,W32/Pate,W32/Pate!dam,W32/Pate.dam,W32/Pate.dr,W32/Polip,W32/Polip!mem,W32/Polybot,W32/Polybot.bat,W32/Sasser.worm,W32/Sasser.worm!ftp,W32/Sdbot,W32/Sdbot!irc,W32/Sdbot.bat,W32/Sdbot.cli,W32/Sdbot.dll,W32/Sdbot.dr,W32/Sdbot.worm,W32/Sdbot.worm!ftp,W32/Sdbot.worm.bat.b,W32/Sdbot.worm.dr,W32/Sdbot.worm.gen,W32/Sdbot.worm.gen.a,W32/Sdbot.worm.gen.b,W32/Sdbot.worm.gen.c,W32/Sdbot.worm.gen.d,W32/Sdbot.worm.gen.e,W32/Sdbot.worm.gen.q,W32/Sober,W32/Sober!data,W32/Sober.dam,W32/Sober.eml,W32/Sober.f.dam,W32/Sober.g.dam,W32/Sober.q!spam,W32/Sober.r.dr,W32/Sober.r@MM,W32/Sobig,W32/Sobig.dam,W32/Sobig.eml,W32/Sobig.f.dam,W32/Sobig.gen@MM,W32/Spybot.worm,W32/SQLSlammer.worm,W32/Swen,W32/Swen@MM,W32/Virut,W32/Virut!mem,W32/Yaha.eml,W32/Yaha.gen@MM,W32/Yaha.y@MM,W32/Yaha@MM,W32/Zafi,W32/Zafi.b.dam,W32/Zindos.worm,W32/Zotob.worm,W32/Zotob.worm!hosts


Download v10.0.0.482 [2,641,920 bytes] (01/10/2009).


Hope this will be helpfull

Thanks & Regards

Nanda Kishore :)

hi my friend got that last week to... ehat you need to do is download kaspersky. after running kaspersky. that will be gone. you can download kaspersky @ majorgeeks.com Here are some examples of autorun viruses which rely on the autorun function of Windows to infect PC’s and flash drives. Funny UST Scandal.avi.exe Autorun.vbs win32.autorun.k copy.exe imgkulot taga lipa are autorun.vbs recycler FS6519.dll.vbs strawberry from baguio W32/Perlovga (copy.exe | host.exe) VBS_RESULOWS.A Bha.dll.vbs w32automa worm (Autorun.vbs) Trojan.Win32.VB.atg | Win32/Dzan | Worm_vb.bnr (tel.xls.exe | mmc.exe) W32/RJump.worm (RavMonE) Worm.Win32.Delf.bf | W32.Fujacks (spoclsv.exe) W32.Fujacks.BH (****.vbs) WORM_AGENT.PGV (soundmix.exe) W32/Hakaglan.worm (RVHost.exe) Trojan.Win32.VB.ayo [AVP] (Macromedia_Setup.exe) Trojan.VBS.DeltreeY.b#1 (Destrukto!!! | destrukto.vbs) if you want to manually delete it... Solution is here: 1. Start Notepad [Start Menu-All Programs-Accessories-Notepad] or right-click any empty space in your desktop then select New-Text Document 2. Copy the following text. (note: Everything in between the square brackets should be in one line) REGEDIT4 [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionIniFileMappingAutorun.inf] @="@SYS:DoesNotExist" 3. Save the file with a name (anything) like DisableAutoRun.reg (The extension .reg is the important part) 4. Double Click your newly created registry file. Choose yes or continue to the warning that will appear. hope this helps

first try a reset in your router settings, by typing 192.168.0.1 in your web browser, and you also may have to try a firmware update, but you need to find the version of your router underneath, so refer to this page and see if you have the current firmware:- http://support.dlink.com/products/revision.asp Please be aware that any firmware upgrades need to be done with the rj45 cable and not wirelessly Otherwise, if it's rebooting it could be the W32.Blaster Worm, many other variations of this worm have been found. Some of them are W32/Lovsan.worm and W32/Nachi.worm. These worms create a lot of ICMP traffic which may overload the router to eventually prevent it from communicating. Whether it´s the CPU or another component of the router that causes the failure, the problem can only be solved through the removal of this virus. There´s a tool provided by McAfee called Stinger. This tool will detect and remove the viruses that cause these problems. Please take a minute to read about this tools and it´s usage. You will need to run this tool on every single computer. the tool can be found here:- http://vil.nai.com/vil/stinger/