A computer running the Microsoft
Windows XP, Windows 2000 or
Windows NT 4.0 operating system
that is infected with the "Blaster"
worm will either slow significantly as
the worm searches for other
vulnerable systems or display a
pop-up warning that it will restart in
60 seconds.
After it restarts, the restart warning
and reboot are likely to repeat, the
result of the worm attacking a
program that the computer's
operating-system needs.
To fix the problem on a computer
running Windows XP, experts at
Atlanta-based Internet Security
Systems Inc. say:
• Stop the reboot loop by pressing
the Ctrl, Alt and Delete keys
simultaneously. Then search for a
file in the pop-up "applications" list
that will appear called
"msblast.exe." Click on the
"msblast.exe" file name and then
click on "End Task" to stop the
worm from running.
• Use the computer's search program to find the culprit file -- msblast.exe -- on the hard drive. To do that, click the "Start" button on the lower left corner of your screen, then "Search." That will bring up a search box.
• Choose the option to search all files and folders. Once the search prompt opens, enter the
search term "msblast.exe." Delete any matching files, then empty your recycle bin.
• Turn on the firewall software included in Microsoft XP. From the Start menu, click on the
"Connect To" menu, then select "Show all connections." Select the first icon you see there,
right-click it and select "Properties." Click the "Advanced" tab, the last one on the right, and check the box next to "Internet Connection Firewall." Repeat this step for each icon in that connections window.
• Download the Microsoft software fix to protect your computer against the Blaster worm from the Web site windowsupdate.microsoft.com.
• Unplug your Internet connection. Restart your computer. Once the computer is fully rebooted, reconnect it to the Internet.
• If you have not been keeping up to date with patches from Microsoft, go back to Windows
Update and let Microsoft scan your computer for other critical updates. Download and install all of those listed.
• Make sure anti-virus software is installed, and update virus definitions.