Tech Support
|
[
Tech Support ] [ Main Menu ] |
|
|
|
1488 |
|
|
Date: April 02, 2011 at 14:50:53
From: Listen'n2, [DNS_Address]
Subject: how to get rid of "W32/Blaster.worm" malware????? |
|
|
I need help have downloaded many AVD's and as soon as I start to run them this f'n worm blocks it. I have tried going to Safe Mode and still can not get pass this worm
Any suggestions?
I have been told to down load all docs etc to a stick wipe the drive off completely then install the AVD then plug the stick back in and save to comp. Then I would be able to run the AVD. This seems like a lot of work Just hoping you guys have anothe roption I may try
|
|
|
|
Responses:
[1502] [1503] [1501] [1493] [1494] [1490] [1491] [1495] [1497] [1498] [1500] [1489] [1492] [1499] [1496] |
|
1502 |
|
|
Date: April 03, 2011 at 16:38:52
From: Listen'n2, [DNS_Address]
Subject: finally got rid of it I used STOPzila(NT) |
|
|
|
|
|
Responses:
[1503] |
|
1503 |
|
|
Date: April 03, 2011 at 23:56:16
From: Don in Hollister, [DNS_Address]
Subject: Re: finally got rid of it I used STOPzila(NT) |
URL: Stopzilla reviews |
|
Hi Listen 2. Thought you might like to see the reviews from Cnet.com about STOPzilla. Take Care...Don
|
|
|
|
Responses:
None |
|
1501 |
|
|
Date: April 03, 2011 at 13:19:10
From: Don in Hollister, [DNS_Address]
Subject: Re: how to get rid of "W32/Blaster.worm" malware????? |
URL: Vipre antivirus |
|
Hi Listen. I have been using Vipre home premium for about 2 years now. The one thing I like about them is that they have a toll free number you can call when you run into a problem such as you have. It won't cost you a penny to let them take care of the problem for you. The other thing I like about their program is that if it sees something that doesn't look right it will block it. You do have the option to override the block, but the way I look at it if I'm paying it to keep me safe as possible why would I want to override the block? Take Care...Don
|
|
|
|
Responses:
None |
|
1493 |
|
|
Date: April 02, 2011 at 18:40:58
From: Anonymous Bastard, [DNS_Address]
Subject: Re: how to get rid of "W32/Blaster.worm" malware????? |
|
|
There is only one way to guarantee removal, and that is to do basically what you've been told. Wipe and start over.
Copy off all files you need to save.
ERASE the drive. Reformatting is not good enough.
Reinstall the OS. Install whatever anti-viral programs, etc... you feel the need for. Install all these programs from trusted secure original media.
Scan the files you saved BEFORE copying them back to your computer, BEFORE you open them, BEFORE you access them in ANY way (other than the scan). Even so, there is no guarantee that they are safe or successfully cleaned. Treat them with caution. There could be 'zero-day' infections, which means the AV guys don't know about it yet.
Even if you find a program that removes that virus, you do not know what other things it may have done to your system that have gone undetected. As you have already encountered, the virus is interfering with your ability to clean it. How do you know it's not also interfering with your anti-whatever programs too? Thus giving false reports that your system is clean?
It sucks. But it's the only way to be sure.
This job is much easier when you can put the infected drive into another known clean computer as a secondary drive.
Another possibility is to buy a new drive and install clean onto that.
Either of these last two methods will allow you to scan the infected drive without the infection compromising your attempts. Just having the infected drive installed on a new system will not harm the new system. The virus is a program and unless you execute the code, it will not do anything.
If you go the 'new drive' route, once you have recovered/cleaned any files you need from it onto the new drive, you can then ERASE and reformat the old one. Then you'll have extra storage. Or, you can use it as a place for the backup of your data.
Anonymous Bastard
|
|
|
|
Responses:
[1494] |
|
1494 |
|
|
Date: April 02, 2011 at 21:33:38
From: Listen'n2, [DNS_Address]
Subject: Re: how to get rid of "W32/Blaster.worm" malware????? |
|
|
appreciate your post Anon I'm going to give it one more try (with my limited abilities) if I fail again i'll be dropping the computer off at a repair shop
|
|
|
|
Responses:
None |
|
1490 |
|
|
Date: April 02, 2011 at 16:02:42
From: CeePeeUee, [DNS_Address]
Subject: Re: how to get rid of "W32/Blaster.worm" malware????? |
|
|
AVD's =? what is this? How do you know which worm is doing it? Which AVG & why doesn't it stop it?
>I have been told to down load all docs etc to a stick wipe the drive off completely then install the AVD then plug the stick back in and save to comp.
One approach yes - but write to two sticks in case the first one is hosed (dble backup).
U mean reinstall the operating system and then the "AVD"(?)- what is this?
>This seems like a lot of work Just hoping you guys have anothe roption I may try
It looks like the safest bet. The usual approach is to do a full scan with AVG with an updated signature file. If it is working it should handcuff the worm.
Another option is go to an online scan if you are able (ESET NOD32 maybe)? However this risks downloading more worms if you got baited into going to a malware look-a-like site.
A third option is to remove the HD and move to ANOTHER cpu with an updated AVG and signature file. Intall the HD as a second or third drive on the other puter -DO NOT BOOT from this drive. Then set your avg to scan on (re)boot - if there are worms on that drive it should fine them and guarantine them. You may get OS problems depending since it may scan for duplicate OS on your (other) drives and may opt to use those .exe .dlls depending on the PATH information IN MSCONFIG SETTINGS file. Riak is that the 2nd cpu also gets infected.
Goodluc
|
|
|
|
Responses:
[1491] [1495] [1497] [1498] [1500] |
|
1491 |
|
|
Date: April 02, 2011 at 17:48:31
From: Listen'n2, [DNS_Address]
Subject: CeePeeUee Re: how to get rid of "W32/Blaster.worm" malware????? |
|
|
AVD = anti virus disabler I always thought AVG was a particular brand of anti virus
"how do I know which worm?" Well it keeps announcing it's self I am absolutely unable to use firefox have revived internet explorer to write here today. for some reason it'll let me use "e"
all this is beyond my capabilities or so it seems If it's mechanical I can fix it but give me electronics and I'm a retard
I was hoping someone would have had this same experience and could give me the name of a "free" download that worked for them on this bad ass worm
|
|
|
|
Responses:
[1495] [1497] [1498] [1500] |
|
1495 |
|
|
Date: April 02, 2011 at 21:40:43
From: CPU, [DNS_Address]
Subject: Re: CeePeeUee Re: how to get rid of "W32/Blaster.worm"... |
|
|
>AVD = anti virus disabler OK WHY RU downloading multiple ones?
>I always thought AVG was a particular brand of anti virus U R right - I should say AV Software.
>"how do I know which worm?" Well it keeps announcing it's self
How? - what letters are seen on the screen? Spell it out for me. It sounds like your AVs was just working fine and blocking AVD's (which is what a virus /worm does too). (That'd make you a dummy).
>all this is beyond my capabilities or so it seems If it's mechanical I can fix it but give me electronics and I'm a retard You may still qualify :) - see above.
>I was hoping someone would have had this same experience and could give me the name of a "free" download that worked for them on this bad ass worm
What is showing on your screen or by what logic are you identifying this 'worm'?
Some AVs dig in deep to prevent infection - so even if you think you have disabled it you have not. Sometimes an uninstall /reinstall is needed to install other things.
Yes - sometimes downloaded stuff without using some discernement and good choices leads to some unhappy outcomes and some work in recovering from it.
|
|
|
|
Responses:
[1497] [1498] [1500] |
|
1497 |
|
|
Date: April 03, 2011 at 05:29:50
From: Listen'n2, [DNS_Address]
Subject: Re: CeePeeUee Re: how to get rid of "W32/Blaster.worm"... |
|
|
nice comment
How? - what letters are seen on the screen? Spell it out for me. It sounds like your AVs was just working fine and blocking AVD's (which is what a virus /worm does too). (That'd make you a dummy).
spelled out it reads "W32/blaster.worm"
|
|
|
|
Responses:
[1498] [1500] |
|
1498 |
|
|
Date: April 03, 2011 at 05:34:08
From: Listen'n2, [DNS_Address]
Subject: oh and BTW |
|
|
I am aware that this virus is only "scareware" and that I likely don't really have all these viruses but this worm has installed itself in such a way as to prevent me from running any AV programs even what I had as an AV program, prior to the attack
|
|
|
|
Responses:
[1500] |
|
1500 |
|
|
Date: April 03, 2011 at 09:37:20
From: CPU, [DNS_Address]
Subject: A solution - Re: oh and BTW |
|
|
Go to startingpage.com (punked by Google.com) and type
"w32/blaster" worm removal
then cross your fingers and carefully slect one (or more of the links) and implement the solution.
back up all docs files first (no exe dll bat com files).
(When in doubt - google it (or startingpage.com it).
|
|
|
|
Responses:
None |
|
1489 |
|
|
Date: April 02, 2011 at 15:41:29
From: freemind, [DNS_Address]
Subject: Re: how to get rid of "W32/Blaster.worm" malware????? |
|
|
Microsoft has a removal tool Lar.
|
|
|
|
Responses:
[1492] [1499] [1496] |
|
1492 |
|
|
Date: April 02, 2011 at 17:49:23
From: Listen'n2, [DNS_Address]
Subject: Re: how to get rid of "W32/Blaster.worm" malware????? |
|
|
yah I tried that too, no luck
|
|
|
|
Responses:
[1499] [1496] |
|
1499 |
|
|
Date: April 03, 2011 at 06:58:20
From: Jackie, [DNS_Address]
Subject: Re: how to get rid of "W32/Blaster.worm" malware????? |
|
|
I feel for you dealing with this worm. It's a pain in the ass and digs in deeper everytime you turn on your computer. The reason I know this because I had it once on one of my work computers. I tried the removal tool and it didn't work. I finally took it to a good shop
|
|
|
|
Responses:
None |
|
1496 |
|
|
Date: April 03, 2011 at 02:49:14
From: freemind, [DNS_Address]
Subject: Re: how to get rid of "W32/Blaster.worm" malware????? |
|
|
|
|
|
Responses:
None |
|
[
Tech Support ] [ Main Menu ] |