Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: W32/Blasterworm Attack Help Please?!?

26 Mar 2011   #1
Pryncez

Windows 7
 
 
W32/Blasterworm Attack Help Please?!?

Ok, so my laptop has been attacked by this virus and a program called Spy Protect. None of my applications will open, i tried to put in a disk that have avg, but it won't execute the file. I even tried going to the task manager and shutting down defend or the msblast.exe process, but the virus closes it before I can even click on it... Idk what to do or what tool to use, since this stupid virus stops everything from running. Can anybody help me get rid of this without having to pay $50??


My System SpecsSystem Spec
.
26 Mar 2011   #2
hangdawg

windows 7 home premuim 64 bit
 
 

heres a free tool from norton with instructions http://www.symantec.com/security_res...081119-5051-99
My System SpecsSystem Spec
26 Mar 2011   #3
sreedhav

MS Windows 7 Home Premium 64-bit SP1
 
 

Dear pryncez,
Download this to a One GB usb stick( from the pc you are viewing) and run the program >>> Kaspersky Virus Removal Tool Link : Virus Removal Tools. How to manually disinfect : How to manually disinfect your computer using Kaspersky Virus Removal Tool 2010?

regards,
Sreedhav
My System SpecsSystem Spec
.

26 Mar 2011   #4
Pryncez

Windows 7
 
 

Thanks so much guys! Trying again now. Do i need to run my pc in safemode??
My System SpecsSystem Spec
26 Mar 2011   #5
sreedhav

MS Windows 7 Home Premium 64-bit SP1
 
 

Dear pryncez,
the Symantec tool and the Kaspersky tool can be used in "safemode",if you can get there! Restart the computer and as soon as you see the F12 appearing at the bottom of the screen, start tapping on F8 key and you will be offered a menu from which you can choose "safemode".

In my laptop, i have to press F5 first and later F8! Kindly get back and tell us how it went so that i and others can be benefitted.

Regards,
Sreedhav.
My System SpecsSystem Spec
26 Mar 2011   #6
Pryncez

Windows 7
 
 

The virus couldnt be detected in safemode, so im gonna try running windows normally. i'll let u know how it works out. *crosses fingers*
My System SpecsSystem Spec
26 Mar 2011   #7
Pryncez

Windows 7
 
 

I can't get any of those things to work. I must have some other kind of virus. A program called spy protection or defender or something is the problem, but I cant find the program or anything. Im just going to do a system restore.
My System SpecsSystem Spec
26 Mar 2011   #8
sreedhav

MS Windows 7 Home Premium 64-bit SP1
 
 

Quote   Quote: Originally Posted by Pryncez View Post
Thanks so much guys! Trying again now. Do i need to run my pc in safemode??
No, you may try first in normal mode and if the pc is shutting down on it's own ,so very frequently,then you may choose safe mode!

regards,
Sreedhav
My System SpecsSystem Spec
26 Mar 2011   #9
hangdawg

windows 7 home premuim 64 bit
 
 

here's a guide on using super anti spyware portable complete how to make it and use it SUPERAntiSpyware Portable is the Must-Have Spyware Removal Tool You Need - How-To Geek

its free and very good
My System SpecsSystem Spec
27 Mar 2011   #10
Carolyn

Windows 7 Ultimate 64 bit
 
 

Hello Pryncez,


Rkill
Note: If your security software warns about Rkill, ignore & allow the download to continue.
Download RKill by Grinler from Here & save it to your Desktop.
Alternate download links:
Two
Three
Four
  • Double click Rkill to run it
  • A command window will open then disappear upon completion, this is normal
    • If this does not happen... delete the file, then download & use the next link provided
    • If it does not work, repeat the process & attempt to use one of the remaining links until the tool runs
  • Do not reboot your machine until asked to do so. If no version of Rkill would run, please let me know
  • When finished, Notepad will open with a log file, automatically saved at C:\rkill.log
  • Copy/paste the contents of the rkill.log file in your next reply
  • Leave Rkill on the Desktop unless instructed otherwise

Quote:
Note: If you get an alert that Rkill is infected, ignore it. The alert is a fake warning given by rogue software, trying to "protect" itself from being terminated or removed. If you see such a warning, leave the warning on the screen, then run Rkill again. By not closing the warning, this sometimes allows you to bypass the malware's attempt to protect itself, so that Rkill can perform its routine.
========================

Malwarebytes Anti-Malware:

Please download Malwarebytes' Anti-Malware to your desktop.

  • Double-click mbam-setup.exe and select then follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform full scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • When completed, a log will open in Notepad. Please post that log in your next reply.
The log can also be found here:
  1. Launch Malwarebytes' Anti-Malware
  2. Click on the Logs radio tab.


Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.

========================


Download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds.scr to run the tool.
  • When done, DDS will open two (2) logs:
    1. DDS.txt
    2. Attach.txt
  • Save both reports to your desktop.


========================

Please post the following for my review:
  • The Rkill log
  • The Malwarebytes' log
  • DDS.txt and Attach.txt
My System SpecsSystem Spec
Reply

 W32/Blasterworm Attack Help Please?!?




Thread Tools




Similar help and support threads
Thread Forum
DDoS Attack, Changed IPs Still Under Attack
I'm being DDoS attacked. My ping was been spiking from 50 to 250+. I've tried changing my IP multiple times and I still was attacked (Note: I own 3 computers and 1 tablet). I've tried disabling startup processes, av scans, and basic rootkit scans and found nothing. However, after I uninstalled...
System Security
W32/Blasterworm warning
Dell Inspiron 1545 currently being worked on. Currently on it has McAffee, 'Advanced System Security', and 'Internet Security 2013'. This is a friend's PC I was trying to fix, all she wants is the pictures, and I could reformat while saving the flatfiles I assume and be safe, but she doesn't...
System Security
BF3 under attack
source I was going to play some tonight :cry: ..guess I will wait.
Gaming
Am I under attack?
Computer has been running a little strangely, lately. Seems that after I manually shut it down, it won't restart unless I toggle the on/off switch of one of the surge suppressors I have it attached to. So I ran Norton 360 to see what it has been doing to protect me. Below is a screen shot of...
System Security
MAC Attack
No I'm not hungry, it's just the the firewall popped an alert that it had blocked an attack by something using the same MAC address of my primary rig, and since I have the wireless disabled, I can only imagine that this must have come from the internet. I have seen a number of attacks blocked...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 08:55.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App