keep getting infected by w32/blaster worm

August 31, 2011 at 07:20:40
Specs: Windows xp
accidentally downloaded a corrupt file. Can anyone help me out? initially i was able to boot into safe mode and run webroot antivirus, it found some viruses but now even in safe mode im getting that error message when trying to open any program. Any suggestions? also downloaded and ran blaster fix, my laptop is still acting up though..thanks

See More: keep getting infected by w32/blaster worm

Report •

August 31, 2011 at 11:15:24
w32/blaster can be a very tricky virus to get rid of.

Try doing a google search, on a clean computer, for "Kaspersky Rescue disk ISO download." Download the ISO and burn it to a CD-R or CD-RW.

Place the CD in the tray of the infected computer, and start it up. Make sure that it boots too CD, and the Kaspersky Rescue disk will load. Follow the prompts.

Make sure you update, and run a full scan of every file. Make sure to try and cure files before you delete them.

Good Luck!

Report •

August 31, 2011 at 11:53:44
its a dell mini laptop with no disc drive, can i download the program and put it on a flash drive?

Report •

September 2, 2011 at 09:47:28
Yes, if your computer is capable of booting from a USB drive.

Report •

Related Solutions

September 4, 2011 at 18:49:48
The key word here is "WORM".

Instaling critical updates makes you immune to worms.

Step by step directions:

Embrace paranoia, they ARE out to get you!

Report •

September 4, 2011 at 20:04:18

Rather doubt that it is the Blaster Worm. You are most likely receiving a bogus infection warning, or a fake alert, from a Rogue security program.

Try the following:

If you are able to get on the Internet, press on with the instructions that follow. However, if the infection does not let you download files to the infected computer, or you still have no Internet connection, download the files/programs requested below to a clean computer and then transfer them to the Desktop of the infected computer. You can use a USB flash drive, or other removable media (CD/DVD, external drive).

Download 'RKill':

[If the file does not download, paste the following, >without the brackets<, in the address bar of your browser:

Also download Malwarebytes’ Anti-Malware (black button with green and white icon)

Save both programs to the USB flash drive, and then transfer to the Desktop of the infected computer.

To run RKill, double-click the program

A black DOS box briefly flashes and then disappears. This indicates the tool ran successfully.

Next, run Malwarfebytes’ AntiMalware and update the program.

Once updated, select 'Perform Full Scan' and click the 'Scan' button.

When the scan finishes, click OK in the message box, and you will see the results of the scan.

Click the ‘Remove Selected’ button to get rid of the malware.

When Malwarebytes finishes, you may be prompted to reboot. If so, reboot.

Please post the Malwarebytes log in your reply.

There may be more work to do...

Retired - Doin' Dis, Dat, and slapping malware.
Malware Eliminator/ Member of UNITE and the
Alliance of Security Analysis Professionals

Report •

September 6, 2011 at 15:17:07
Don't get me wrong but it can't be the actual W32/Blaster.worm, it's out of the game. I have to agree with aaflac44, you are getting bogus security notifications about non-existent infection. It's either scareware called "Security Protection" or some other variant of scareware from the same family. The easiest way to remove this malware from your computer is to use Malwarebytes in safe mode with networking. I won't repeat the whole removal procedure here as it's very well documented on these web pages:

Report •

November 26, 2011 at 10:19:23
Your info was great and easy to follow but when I tried to run the rkill program it that trwctrl... cannot run... infected with w32/blaster.worm ....please activate Privacy Protection to protect your computer. Now what?
please reply to

Report •

November 26, 2011 at 18:35:25
I was infected with one of these rouge security program, I ran the rkill that you suggested and also ran the malwarebytes this seemed to fix the problem. However the next day, the virus was back but this time I tried to run the rkill and the malwarebyte but the program blocked them from running.

What do you suggest i do at this point?

Report •

Ask Question