W32.Blaster.Worm / Worm.Win32.Lovesun Removal

[wsjb78]

Here are removal tools for those two worms:

1.) If your PC is infected download first the removal tool:

http://securityresponse.symantec.com...oval.tool.html

2.) To patch your W2k / XP computer download the patches:

W2k: http://microsoft.com/downloads/detai...F-220354449117

XP: http://microsoft.com/downloads/detai...2-3DE40F69C074

[Panky]

Thanks for the links!

[wsjb78]

For such a sweety as you Panky it was a real pleasure to do so

[eiht]

thanks

[Magnus3x]

yep!!!...I got this fucker yesterday...it was easy to get rid of..but annoying as hell when you have it. I just bought a laptop and had it online one day and I got the fucker..while setting my laptop up.Grrrr

Basicaly a box will appear and will say "NT Remote System is shutting your computer off in 60 seconds, you will lose all unsaved data" If you try and run the windows patch it will shut your puter down, as it's written to do so.

The symantics extraction is the way to go.

[gunner]

yea, thanks!

[Panky]

Originally posted by wsjb78
For such a sweety as you Panky it was a real pleasure to do so

Awww....

[Seth]

There's already a variant out.. W32.Blaster.B.Worm it uses a different executable though, Penis32.exe instead of msblast.exe Symantec has beta definitions out for it, but if you get it, you can use the same removal tool that wsjb78 pointed you too