Msblast Trying To Remove/help!!!

Discussion in 'Software' started by granogue, Dec 10, 2004.

  1. granogue

    granogue Private E-2

    I need to remove MSBLAST from a Compaq Presario 2500 laptop. I tried running the remove tool from Symantec, turned off system restore, and then started the Symantec removal program. A message popped up saying I don’t have administrator rights to remove the worm. How can I remove MSBLAST from the laptop without using the Symantec program, or how can I make myself the administrator temporarily to be able to use the program?

    Any help will be appreciated!
     
  2. IrOnMaN

    IrOnMaN Specialist

  3. granogue

    granogue Private E-2

    My computer has MSBLAST worm. I saw it in task manager, or one of those programs where you can see what processes are running. I downloaded symantec’s MS Blaster. Booted up the computer in safe mode; MS BLASTER didn’t find the worm, but it did delete the value “windows auto update” from the registry key “HKEY\LOCAL MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN”. I think, stupidly in retrospect, well “why not install the security patch from Microsoft?” So I install it in safe mode. Restart computer, the same problem occurs again. I’ll be on the computer for 2,3,4,5 minutes or so and the laptop will suddenly shut down with no warning message. In reading up on msblast on websites they say that one way to know if you have msblast is that before the computer shuts down a dialog box will tell you that the system is shutting down and that this shutdown was initiated by NT AUTHORITY/SYSTEM. However, when my laptop shuts down that dialog box doesn’t appear, it justs shuts off, as if somebody pushed the power button. But I know I have MSBLAST because I saw it in the running processes, or somewhere. The problem now is that I’ve been looking for the place I originally saw msblast and I can’t find it. Might it be possible that because I didn’t successfully delete msblast that maybe it hid itself or gave itself a different name? Should I uninstall the windows patch and run the Symantec tool again? This is really bothersome. I don’t like the way the computer just shuts off. It can’t be that the power adapter is malfunctioning because the laptop battery is fully charged.

    I’ve also run Norton and Spybot in safe mode. Norton didn’t find anything. Spybot found 32 adware but I deleted them and I still have the same problem. If I find the msblast file by using windows xp search function, could I manually delete it?
     
  4. Farbib

    Farbib Corporal

    Is System Restore enabled? If so, it can restore Blaster, disable it. System Restore may have the unfortunate side effect of restoring viruses.

    As far as I know, Blaster worms are saved as msblast.exe or penis32.exe in the Windows system folder, and I have not heard of a variant that renames itself.
     
  5. Farbib

    Farbib Corporal

    I hated writing that last sentence.
     
  6. yukon98

    yukon98 Specialist


MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds