Steps to Fix the Blaster Worm

This web page was created to address how to fix the Blaster worm which interferes with your computer's ability to perform a Windows Update and a Norton AntiVirus Live Update. However, it also contains instructions to help you keep your computer up-to-date with both Windows and Norton AntiVirus updates.

Due to "Blaster" triggering a Windows shut down sequence with a 60-second warning, you will have to change some settings (steps 4-14) to continue to work in Windows uninterrupted. (You might even have to boot your computer up in Safe Mode to perform the necessary tasks to fix this problem if your computer wants to shut down before you can complete the steps to eradicate the virus.)

You also will have to turn off System Restore (steps 15-23) until you have fixed the virus and completed both a Windows Update and a Norton AntiVirus Live Update. Make sure you turn this feature back on when instructed.

Change Windows System Settings

1. Make sure your computer is turned off.
2. Disconnect the network cable from your computer's network card (located in the back of a desktop machine and usually on the side of a notebook computer). If you are using a dialup connection for the Internet, disconnect the phone line from the back of your computer.
3. Turn your computer on.

   Note: If you aren't able to keep your computer from shutting down, you might have to boot up in Safe Mode.

- Remote Procedure Call Changes

1. RIGHT click on the My Computer icon.
2. Select Manage.
3. Click on Services and Applications in the left pane of the window (or click on the plus sign to expand the listing).
4. Next, click on Services.
5. Maximize the window to make viewing the choices easier.
6. Scroll in the right pane of the window to find "Remote Procedure Call."
7. RIGHT click on "Remote Procedure Call" and select Properties.
8. Click on the tab labeled "Recovery."
9. Set First Failure, Second Failure, and Subsequent Failure to "Restart the Service."
10. Click on [Apply] and then on [OK].
11. Close the Computer Management window.

- System Restore Changes (see System Restore note at bottom)

1. RIGHT click on the My Computer icon.
2. Select Properties.
3. Click on the tab labeled "System Restore."
4. Check or select "Turn off System Restore."
5. Click on [Apply].
6. Click on [OK].
7. Shut your computer down.
8. Reconnect the network cable in your computer's network card.
9. Turn your computer on.

Safe Mode: As your computer boots up, press the <F8> key to force the computer to the screen where you can select Safe Mode. Then select "Safe Mode" when given that choice.

Norton AntiVirus (NAV) Updates (Do every time you are online!)

The reason to do this should go without saying. New viruses are discovered weekly, if not daily, and your computer needs to be protected. To do this, you connect to the Symantec (Norton AntiVirus parent company) Web site using the [Live Update] button and download a listing of the newest viruses to add to your computer's database of virus names. This will help NAV know what to look for as new files are introduced to your computer (diskettes, Zip disks, Internet downloads, e-mail attachments, etc.).

Follow the instructions below.

- Download Current Definitions

1. Establish a connection with the Internet. If you are connected directly through a broadband connection, you don't have to do this.
2. Double click on the Gold Shield on the Taskbar. If you don't see it, you'll need to click on the round button with the less than symbol on it. That should show you the gold shield.

   If you still don't see the gold shield, make sure you have Norton AntiVirus loaded on your computer. Click on Start, (All) Programs, Symantec Client Security, Symantec Antivirus Client. If you have the older version of Norton AntiVirus, you may need to select Norton AntiVirus Corporate Edition, Norton AntiVirus Corporate Edition after selecting Start, (All) Programs. Live Update may be "grayed out" and show an icon representing a "lock." This means the antivirus is managed centrally and that new virus definitions are sent to your computer automatically. If it is managed, skip to the next section "Scan Hard Drive."

3. Click on [Live Update].
4. Click on [Next] and follow on-screen instructions.
5. The download process should start. Then, you'll probably only need to click on [Finish] to get the updates installed on your computer.

1. While still in NAV, you can do a scan by selecting Scan, Scan Computer.
2. Then, click on the box by drive C: and choose [Options] by clicking on that button. Make sure "All Types" under File Types is selected.
3. Click on [OK] and then click on the [Scan] button.

   You can minimize this window and then do other tasks. However, it will work faster if this is the only process running.

4. Close the Norton AntiVirus main window.

Update Windows

To keep Windows operating smoothly, you should make sure you go online and download any updates necessary for your computer. You should at least download and install the critical updates (sometimes referred to as security patches and updates).

New computers are set up to automatically download critical updates. However, they are also configured to prompt you before these updates are installed. Please install updates when you are prompted. Many problems can be prevented when this is done by the user.

Note: If your Windows XP computer was purchased around December 2002, you should run the Windows XP Service Pack 1 file that is found on the Technology Support Tools CD 2003 - 2 of 2 in the folder named \Windows Service Packs\Windows XP Service Pack 1. Follow the instructions titled "Windows XP Service Pack" in the \Instructions\Windows Service Packs folder on the Technology Support Tools CD 2003 - 1 of 2 for help in completing this task.

Follow the instructions below to update the Windows operating system.

1. Click on the Start button on the Taskbar. (You might see Windows Update on the Start Menu. If so, select it from there and skip step #2.)
2. Select (All) Programs and then Windows Update. (If you are using Internet Explorer (IE) 6, you also can select Tools, Windows Update once IE is loaded.)
3. Click on Scan for Updates.
4. Review and install updates that seem necessary for your computer. At least install the Critical Updates.
5. You will probably need to click on [Install Now] and then click on [Accept].
6. Look at the left pane of the Microsoft site to see if there are other updates under the Windows XP or Drivers sections. Select these as needed.
7. Close Internet Explorer. (Disconnect if using a dialup connection.)
8. Shut down your computer.

You will need to make sure you keep the critical updates (at least!) downloaded and installed regularly.

Downloading the Blaster Fix File

1. Turn your computer on.
2. Once you see the Desktop screen, put a formatted diskette into drive A.
3. Download the FixBlast.exe to the diskette by going to the following URL: http://securityresponse.symantec.com/avcenter/FixBlast.exe
4. Save the file to a diskette by clicking on [Save] at the File Download screen.
5. Then, click on the drop-down button next to "Save in:" and select "3 ½ Floppy (A:)."
6. Once that is selected, click on [Save].
7. When the file has been downloaded to the diskette, click on [Close].
8. Eject the diskette and shut down your computer.

1. Turn your computer on.
2. As your computer boots up, press the key to force the computer to the screen where you can select Safe Mode.
3. Then, select "Safe Mode" when given that choice.
4. You should be at the computer's Desktop or opening screen.
5. Put the diskette with the Blaster fix into drive A.
6. Click on Start, Run.
7. Type "a:fixblast.exe /start" (without the quotes) and click on [OK].

Change Windows System Settings

Note about System Restore: "System Restore is a component of Windows XP Professional that you can use to restore your computer to a previous state, if a problem occurs, without losing your personal data files (such as Microsoft Word documents, browsing history, drawings, favorites, or e-mail). System Restore monitors changes to the system and some application files, and it automatically creates easily identified restore points. These restore points allow you to revert the system to a previous time. They are created daily and at the time of significant system events (such as when an application or driver is installed). You can also create and name your own restore points at any time." Source: Windows XP Professional Help

- System Restore Changes - Turn Back ON!

1. From the Desktop screen RIGHT click on the My Computer icon.
2. Select Properties.
3. Click on the tab labeled "System Restore."
4. UNcheck or deselect "Turn off System Restore."
5. Click on [Apply].
6. Click on [OK].

- Automate Windows Updates

1. From the Desktop screen RIGHT click on the My Computer icon.
2. Select Properties.
3. Click on the tab labeled "Automatic Updates."
4. Select the following option under settings - "Download the updates automatically and notify me when they are ready to be installed."

   Another option would be to select "Automatically download the updates, and install them on the schedule that I specify." Then, you would set the day of the week and the time for the installations. Both options will download the updates automatically; however, the second choice installs the updates without your request to do so. Both options will automatically go to the Microsoft Web site to check for critical updates and download them for you.

5. Click on [Apply].
6. Click on [OK].