Security >> Virus help >> MSBlast virus

MSBlast virus

The MSBlast virus is also known as W32.Blaster.Worm, W32/Lovsan.worm, WORM_MSBLAST.A, Win32.Posa.Worm.

To fix your computer, you need to :
  1. Download and install the latest Microsoft Security update or 'patch' for the version of Windows that you are using
  2. Download and run a virus removal tool
  3. Make sure you take steps to protect your computer against future viruses.
These files are provided by Microsoft and Symantec, a market leader in anti-virus protection, and so are safe to download. You may want to print this page so you can refer to the instructions as you download and install the various tools.

My computer is re-starting itself, what should I do?
The MSBlast virus can cause your computer to re-start itself frequently. If it is doing this, please follow the instructions below:
  • Click on the Start button in the bottom left hand corner of your screen
  • Select 'Run'
  • Type in the word "command" (without quotes)
  • Click the 'OK' button
  • You will then see a black MS-DOS prompt window
  • After the :\> prompt, type "shutdown -a" (without quotes).
This prevents the computer from shutting down. You can now remove the viruses from your computer.

Step one. Download the files you need.

Once you click on the links below, you will see a 'File Download' box. To download the file:
  • Click the 'Save' or 'Save this program to disk' button
  • A 'Save as' box, similar to that used in Word, will then appear
  • Save the file to your desktop. At the top of the 'Save as' box you will see the words 'Save in'. Click on the arrow to the right of these words and select 'Desktop'
  • The file will be saved to your computer's desktop.

At the end of this you should have 3 files on your computer's desktop, named:

  • WinXP.exe or Win2K.exe
  • FixBlast.exe
  • FixWelch.exe
Security update. Select the appropriate link from the list below.

Windows 2000
Windows XP

If you are unsure what version of Windows you have click on the 'Start' button in the bottom left hand corner of your screen. You will see your version of Windows written on the vertical blue bar.

Removal tools Click on the links below, downloading the files one at a time.

W32.Blaster Worm removal tool
W32.Welchia Worm removal tool

Remember, you need to do this for your security update, and both removal tools listed above.
Step two. Install the security patch

  • Double click the icon called "winxp" (for Windows XP) or "win2k" (for Windows 2000) on your computer's desktop
  • Follow the onscreen instructions
  • After you have finished installing the patch your PC will need to be restarted.
Step three. Install the removal tools.
  • Double click the icon called "FixBlast" on your computer's desktop
  • Follow the onscreen instructions. This will scan your computer and remove any trace of the MSblast virus.
  • Double click the icon called "FixWelch" on your computer's desktop
  • Follow the onscreen instructions. This will scan your computer and remove any trace of the Welchia virus.
Once you have run both of these files you'll need to restart your PC. Remember to come back and go through the instructions for removing the Sobig email virus.

Step four. Avoid getting viruses in the future.
There are a number of steps you can take to avoid getting viruses in the future. These include installing a personal firewall and anti-virus software on your computer. More information on this can be found in the sections below:

Protecting yourself from viruses - how to recognise them
Choosing and installing anti-virus software
Installing a personal firewall
Ensuring you keep your operating system up-to-date. Installing Windows updates.

Virgin Media cannot guarantee that the advice provided will definitely prevent a virus from attacking your computer. Neither Virgin Media nor any of its officers, agents and/or employees will be liable for damages arising out of or in connection with any virus.

You may want to print this page out so you can refer to it while you install the files.

print
Security >> Virus help >> MSBlast virus