Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
hello,
i got that virus (blaster worm thing) and i downloaded the microsoft patch and it comes up with an error which says it didnt work, and to make sure the cryptography service is running. i had a look and it is running, but now i cant figure out how to get the virus off! ive managed to change it from counting down 1 minute to an hour, so i do get to do some things on the net before it kicks me off.
please help,
thanks.

If it's patched... go get the tool from symantics... here's the link..
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

You have to have the virus removed before you can apply the patch.
Once you follow the instructions above to remove the virus, you can see my post on how to fix the cryptographic error.
http://www.computing.net/windowsxp/wwwboard/forum/74221.html
It's Response #3
-=Bryan=-

Bryan,
It is interesting that you state that you have to remove the virus before installing the patch. Yesterday I removed the worm off of 7 computers and off of 1 computer today and on all of them I have taken these steps.
1. Disabled System Restore
2. Removed the Registry Key
3. Installed the XP patch and rebooted system
4. Upon restart used Symantec's removal tool to rid the system of the virus
I don't know if it is because I am killing the registry key first but I have installed the patch with the system still infected.
KTTD

Hey Kevin...
Yeah, I think it's because you've removed the registry key. The patch usually doesn't seem to install with the registry key there.
And actually on one computer I removed it from, the Symantec's removal tool wouldn't even work until the reg. key was removed. It would keep crashing every time it got to the infected file. Very odd.
-=Bryan=-

Bryan,
I was able to use the tool after I installed the patch.... I'm finding that alot of my friends who didn't patch before using the tool became re-infected. I installed the patch, ran the tool and verified through the registry that the blaster was removed. I then ran the tool again and all was clean. I haven't had any probs since.

I don't know if it is because I pop the reg key first or not but I do it that way so it looks like I'm doing something really important to those that are paying me a lot of money in the 15mins it takes me to remove the worm :)
KTTD

WoW Kevin!!!
I don't know whether to slam you or shake your hand for bringing your guru status to a whole new level... So, will u be taking us all out too dinner care of your new found wealth?
Maiden

The company I work for has a virus/worm/trojan removal rate and I work within those rates. The client is told when they call in what it is going to cost so they are well aware of it but for that 15mins of time ya gotta make it look difficult and that they could have done the same thing and not spent 275 bucks.
The clients I deal with have money and are just happy to be able to use their computers again. So at $18.35 per min you are getting my services :)
This one will blow your mind. I removed the worm from 6 systems at a company the other day. Now this took me a little under an hour and I charged them 1200.00 dollars for the work. The best part is this, they where happy and thanked me. $20.00 dollars a min is not bad :) To bad I just get a pay check.
KTTD

awsome ...and ive got rid of the virus on nearly every computer in my town for free. I GUESS I MISSED OUT THERE.. LOL

Hi there,
I am trying to run the patch, the reg key has been removed but everytime I try to download the patch my pc crashes half way through.
Help

![]() |
Windows Media 9
|
Internet Explorer errors
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |