Removal Tool for W32.Blaster Virus. Please read abstract for instructions. 1. Download the FixBlast.exe file from: 2. Save the file to a convenient location, such as your downloads folder or the Windows Desktop (or removable media that is known to be uninfected, if possible). 3. Close all the running programs before running the tool. 4. If you are running Windows XP, then disable System Restore. Refer to the section, "System Restore option in Windows Me/XP," for additional details. CAUTION: If you are running Windows XP, we strongly recommend that you do not skip this step. The removal procedure may be unsuccessful if Windows XP System Restore is not disabled, because Windows prevents outside programs from modifying System Restore. 5. Double-click the FixBlast.exe file to start the removal tool. 6. Click Start to begin the process, and then allow the tool to run. NOTE: If, when running the tool, you see a message that the tool was not able to remove one or more files, run the tool in Safe mode. Shut down the computer, turn off the power, and wait 30 seconds. Restart the computer in Safe mode and run the tool again. All the Windows 32-bit operating systems, except Windows NT, can be restarted in Safe mode. For instructions, read the document "How to start the computer in Safe Mode." 7. Restart the computer. 8. Run the removal tool again to ensure that the system is clean. 9. If you are running Windows XP, then re-enable System Restore. 10. Run LiveUpdate to make sure that you are using the most current virus definitions. When the tool has finished running, you will see a message indicating whether W32.Blaster.Worm infected the computer. In the case of a worm removal, the program displays the following results: Total number of the scanned files Number of deleted files Number of terminated viral processes Number of fixed registry entries >>>How to turn off or turn on Windows XP System Restore<<< Situation: You want to know how to turn off or turn on the Windows XP System Restore feature. Solution: System Restore, a Windows XP feature, is similar to the "Last Known Good Configuration" in Windows NT and Windows 2000. You can use System Restore to restore the computer to a previous state, using the backups that it makes of selected system files and program files. However, "Last Known Good Configuration" restores the computer back to the last state that Windows determines might work, whereas System Restore gives you a choice of previous states to restore the computer to. That is, System Restore maintains multiple restore points instead of one last restore point. While this is a desirable feature, in some cases it should be temporarily turned off. For example, if the computer is infected with a virus, then it is possible that the virus could be backed up by System Restore. By default, Windows prevents System Restore from being modified by outside programs. As a result, there is the possibility that you could restore a virus-infected file, or that the on-line scanners would detect the virus in that location. -------------------------------------------------------------------------------- Notes: You must be logged in as an Administrator to do this. If you are not logged in as an Administrator, the System Restore tab will not be displayed. If you do not know how to log in as Administrator, contact the ITS HelpDesk on extension 5200. Turning off System Restore will clear out all previous restore points. -------------------------------------------------------------------------------- To turn off Windows XP System Restore: -------------------------------------------------------------------------------- Note: These instructions assume that you are using the default Windows XP Start Menu and have not changed to the Classic Start menu. To re-enable the default menu, right-click Start, click Properties, click Start menu (not Classic) and then click OK. -------------------------------------------------------------------------------- 1. Click Start. 2. Right-click My Computer, and then click Properties. 3. Click the System Restore tab. 4. Select "Turn off System Restore" or "Turn off System Restore on all drives" check box. 5. Click Apply. This will delete all existing restore points. Click Yes to do this. 7. Click OK. 8. Proceed with what you need to do. For example, removing viruses. Restart the computer and follow the instructions in the next section to turn on System Restore. To turn on Windows XP System Restore: 1. Click Start. 2. Right-click My Computer, and then click Properties. 3. Click the System Restore tab. 4. Clear the "Turn off System Restore" or "Turn off System Restore on all drives" check box. 5. Click Apply, and then click OK.