Aliases: W32.Blaster.Worm (Symantec) W32/Lovsan.worm.a (McAfee) WORM_MSBLAST.A (Trend Micro) Win32.Poza.A (CA) Lovsan (F-secure) Worm.Win32.Blaster.6176 (Global Hauri) W32/Blaster.A (Norman) Blaster (Panda) W32/Blaster-A (Sophos)
- Disconnect from the Internet
- End the worm process
- Delete the worm files from your computer
- Delete the worm registry entry
- Restart your computer
- Take steps to prevent re-infection
Disconnect from the Internet
End the worm process
- Press CTRL+ALT+DEL once and click Task Manager.
- Click Processes and click Image Name to sort the running processes by name.
- Select the process msblast.exe, and click End Process.
Delete the worm files from your computer
To delete the worm files from your computer
- Click Start, and click Run.
- In the Open field, type %windir%\System32
- Click OK.
- Click Name to sort files by name.
- If msblast.exe is in the list, delete it.
- On the Desktop, right-click the Recycle Bin and click Empty Recycle Bin.
- Click Yes.
Press CTRL+ALT+DEL once and click Task Manager.
Click Processes and click Image Name to sort the running processes by name.
- Confirm that msblast.exe is not in the list.
Delete the worm registry entry
- On the Start menu, click Run.
- Type regedit and click OK.
- In the left pane, navigate to the key:
In the right pane, right-click the following value, if it exists:
windows auto update
- Click Delete and click Yes to delete the value.
- Close the Registry Editor.
Restart your computer
On the Start menu, click Shut Down.
Select Restart from the drop-down list and click OK.