I have a msblast.exe file and a msblast.exe-09FF84F2.pf folders. Do I delete both of these?

Here's working fix for the W32Blast.exe Worm Virus. Follow these steps below: 1.)Disable system restore on all XP systems 2.)Download and run this removal tool from Nortons Antivirus using the link blelow. http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html 3.)If while running the tool you get the message that your computer is gonna shut down " Click Start, Run, type Shutdown.exe -A to stop the shutdown. 4.)Search the C:\Windows\System32 folder for the file MSBLAST.EXE and delete it. 5.)Download and install the Patch for your Operating System from Microsoft Q823980 from link below: http://support.microsoft.com/?kbid=823980 6.)Last but not least update your latest Nortons Virus Defenitions to 8.11 For more info on the W32blast.exe Worm visit link below: http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html Thanks to Mike Torres of LISC.org IT dept. for helping me put this fix together...

Thx to everyone for all the help. Ya'll are life savers.......or at least sanity savers.....lol! Thanks again!

Yes, delete the .of version of msblast! It's just a backup that msblast is making of itself to reinstall. So far, I've only encountered this .pf file on a system running XP, under the directory C:\Windows\prefetch\ ... Needless to say, the file DOES need to be deleted, as it is just another means of reinfecting your computer.

I can't delete it !!!!!!!!!!!!! I Download and install the Patch - :( and updated the latest Nortons Virus - :( what can I Do ????????

I'm using a borrowed laptop -- really freaked. I went to Trend Micro then worm_blast.a, security info, scroll down to Manual Removal Instructions, and do it! Next, down one to Removing Autostart...., do that! Then if you haven't used the MS patch, do that. It seems to have worked. But.... my question is, the TrdMicro says msblast.exe in full caps, and I have one running in "task mgr - processes" in lower case. Someone told me the sound card has that name. Do you know?

I just had to delete it, I shut zone alarm down for just a minute and it got into my system. It wouldn't let me delete the file msblast.exe until I deleted the registry key first. I think the registry key is located in HKEY_LOCAL MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENT VERSION\RUN Just look for the entry that has somthing to do with msblast.exe and delete it. Then you should be able to delete the file from the windows\system32 folder! But you still need the patch from microsoft, if i'm not mistaken it blocks port 135 - the one the worm comes in on.