Solved w32.blaster.worm removal help please

February 25, 2012 at 16:44:53
Specs: Windows Vista

okay so i somehow got the blaster worm on my laptop. while searching online on my gf's computer i found a thread on this site about how to remove the worm

After reading the whole thread and since others had stated that it had fixed their problem, i started following xryanx's procedure:

Please reboot and tap "F8", then select "Safe Mode with Networking", from there, download and run the Norton Blaster Worm Removal Tool:

If this does not, work, Download Rkill from here: run it, then try again. (Note: Do not reboot once Rkill is run, as this will cause the malicious process to respawn).

I would also download Malwarebytes Anti-Malware and run a scan:

Please post a log after running Malwarebytes.

Let me know if this helps you, please.

I rebooted in safemode and downloaded and ran rkill since others had said specifically that rkill worked great and fixed the problem. Afterwards, I downloaded and ran Norton Blaster Worm Removal Tool to be extra safe. This resulted in a scan stating that w32.blaster.worm could not be found. As happy as i could be, I assumed that rkill had removed the worm (since the Norton scan said that it could not be found) and rebooted my "clean" laptop in joys of it working properly. It starts booting up but after a few seconds, it shuts down. If i hit F2 for or F10 for it doesnt shut down. I tried hitting F8 but it will still shut down. If anyone can help me get my computer to stay on and remove the blaster worm, I would be VERY grateful!!!!

Thanks in advance, Speedyblueberry

See More: w32.blaster.worm removal help please

Report •

February 25, 2012 at 16:57:27
✔ Best Answer

first of all, rkill does NOT remove any just STOPS the malware process from running.
Try these 2 free 30 day fully functional trials and run them till they run clean:
1- Trojan remover
2- Hitman Pro

You may also want to run a full scan of Malwarebytes and fix all it finds:

Some HELP in posting on plus free progs and instructions 7 Golds

Report •

February 25, 2012 at 18:20:47

When you boot up on F8 .. do you make it to the boot menu? If so, one of the options is to disable auto-reboot. Select the option and then try Safe mode.

If not , Did you make recovery disks when you first got your computer. If so, you can do a startup repair.

Report •

February 25, 2012 at 18:26:18

got the startup to work. :)
still working on the blaster worm :(

I did the trojan remover and it didnt find anything. im running the hitman pro now.

Report •

Related Solutions

February 25, 2012 at 18:45:46

hitman pro found stuff and deleted most of it. some was marked "quarentined" and "ignore" for some reason. currently running malwarebytes

Report •

February 25, 2012 at 20:35:27

How are we doing?

Report •

February 25, 2012 at 20:47:33

Report •

February 25, 2012 at 20:55:43

malwarebytes is still scanning.

time elapsed: 2hrs, 19min, 47sec.
objects scanned: 216958
objects detected: 4

Report •

February 25, 2012 at 21:51:15

Thank you so much for your help xpuser4real and scoobydoo! you two are the best. the scan finished and malware removed! :)
unfortunately, windows security is saying that my malware protection is turned off and it wont turn back on :( but again, MALWARE IS REMOVED!

Thanks again guys!

Report •

February 25, 2012 at 22:03:02

I personally would run Spybot Search and Destroy. Some programs just find and remove some things better than others. I believe Spybot will find whats preventing your security from running. This falls in its realm of specialty.

You can download Spybot from here

Spybot S&D 1.6.2

Report •

February 25, 2012 at 22:12:47

okay thanks, downloading as we speak... er um... type and read :) lol

Report •

February 25, 2012 at 23:33:07

i ran spybot search and destroy, it found 9 problems but could not delete because it said i wasnt the administrator (which i am). Im heading to bed and will go at it again tomorrow morning. ill keep yall updated. thanks again for all of the help so far!

Report •

February 26, 2012 at 08:16:28

Right click on the Spybot icon and use "Run as administrator"

Report •

February 26, 2012 at 08:59:09

okay, ran as administrator. ran scan, found 9 problems. when i clicked "" a pop up came up that said:

some problems couldnt be fixed; the reason could be that the associated files are still in use (in memory). This could be fixed after a restart.

thats all fine and dandy but i ran spybot as soon as i booted up my laptop this morning. oh well, gonna restart and rescan

Report •

February 26, 2012 at 11:49:32

after the last scan that found 9 problems, it removed 6 and 3 remained. I rebooted and ran again. it then said 0 problems found. malware protection still wont turn on. any ideas?

Report •

February 26, 2012 at 14:20:31

which AV or malware protection will not run? What is the name?
If you are using McAfee or Norton, I would suggest you run the uninstallers from their websites, as NO AV will run properly if they are still in the registry. Then I would suggest you maybe try Avast free AV out there. Install it and get it to do a bootscan on reboot and move all it finds to the chest...I wouldn't suggest deleting them as you may delete some part of the OS by mistake.

One thing I noticed after reading haven't used TDSS killer.
In that case I would suggest you run these next 3 progs in the EXACT order listed and DO NOT reboot untill the last scan.
1- rkill.exe
2- tdss killer
3- malewarebytes, run a full scan and fix ALL it finds...then reboot.
Some HELP in posting on plus free progs and instructions 7 Golds

Report •

February 26, 2012 at 15:18:43

Download OTL to your desktop.

Double click on the icon to run it.

Make sure all other windows are closed to let it run uninterrupted.

When the window appears, underneath Output at the top change it to Minimal Output.

Under the Standard Registry box change it to All.

Check the boxes beside LOP Check and Purity Check.

Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.

When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL. Please copy (Edit->Select All, Edit->Copy) the contents of OTL.txt, and paste it as a PM to me and to XPUser4real.

Do not paste the extras.txt at this time.


Viruses place "hooks" into a system which prevent security programs and other programs from running. Sometimes when removing the virus the "hooks" dont get removed and although your computer is not an infecion, the leftover "hooks" still cause problems.

Uninstalling and reinstalling your AV may be all that is needed but I would like to see if anything can be spotted with OTL.

Report •

February 26, 2012 at 16:31:57

where do you download tdss killer from? i googled the name but just want to make sure i download it from a legit source. also, should i do the avast bootscan before or after i run rkill, tdss, and malwarebytes? thanks for all your help

Report •

February 26, 2012 at 16:48:59

Report •

February 26, 2012 at 17:02:41

okay so i removed trend micro (the malware protection i had) and installed avast! and its saying that my malware protection is finally turned on :) so it seem that everything is good and fixed (i hope). i guess something was wrong with trend? i dont know, but atleast every thing is running as it should (for now) thanks again for all of the help you two have given me over the last couple days.

Report •

February 26, 2012 at 20:14:18

you are welcome and thanks for posting will help others

Some HELP in posting on plus free progs and instructions 7 Golds

Report •

March 13, 2012 at 05:06:20

Hi,I have "registry crawler" and its the most useful program for removing unwanted stuff

Report •

Ask Question