Welcome to ValleyNet : ValleyNet KnowledgeBase : Security : ''Blaster'' Virus
''Blaster'' Virus
August 2003 There is a new virus/worm that is spreading throughout the Internet. This worm (referred as W32/Blaster worm), takes advantage of known
vulnerabilities in Microsoft Windows operating systems. Once a
computer becomes infected it is used by the software worm to look for and infect other
Microsoft computers. This virus does not arrive by email, so the ValleyNet Message Center system cannot stop it. If you are running Windows XP (the newest version of Microsoft's operating system), Windows 2000, Windows NT4, or Windows Server 2003, then you may be at risk. Users of Windows 98 and earlier, Windows ME, MacOS 7, 8, 9 or X, and Linux/Unix are not at risk.
To tell if you are infected:
1. Go to Start Menu > Search > Files and Folders > Type in "msblast.exe"
If the file "msblast.exe" exists in your Windows and/or System32 folder then your machine is likely infected.
2. If your machine tends to restart after saying the "RPC Service" has failed, then your machine is likely infected.
All of the download sites for the correct removal tools and patches are extraordinarily busy. ValleyNet has a CD available for purchase at our office. This CD contains the correct removal tool and system patch for this virus. In the meantime, if your machine is infected, you should refrain from connecting to the Internet so that the worm does not continue to infect other computers, until you have applied the removal tools and patch.
Links:
You can download the tool to remove the virus from this Symantec software page.
System patches to remove the risk of being infected with this virus are available from Microsoft: Windows 2000 patch or Windows XP patch.
Microsoft has made a special page about the MBlaster worm to help its customers.

This information last reviewed 8/15/2003

Back to ValleyNet KnowledgeBase

|
ValleyNet |
58 North Main Street, PO Box 486, White River Junction, VT 05001
Voice 802 359-4162 | Fax 802 359-4164 |

|