To all people using windows xp or windows 2000:
Dear Valued Customer:
On August 11, 2003, millions of windows xp and windows 2000 users were immensely affected by an internet worm targeting Microsoft Windows. The worm, called 'Blaster' causes computers to shut down after getting connected in a few minutes.
You are attacked by the Blaster when you see this in your screen:
" If you are unable to resolve this issue on your own, please contact your local computer repair center. "
If you are using Windows 2000 or XP, please visit the Microsoft web site immediately at http://www.microsoft.com/security/incident/blast.asp.
Internet service providers are not associated or connected with this security issue and we can only update our customers on its effects and resolutions.
We have protected all our servers and equipment to make sure that our operations are intact.
If you need any further assistance, please contact our 24/7 customer service hotline.
Thank you!
Sincerely,
Customer Support
=========================================
If you are having difficulty resolving this, please contact your local computer repair center.
IDENTIFYING AND REMOVING W32.BLASTER.WORM
A. Basic Remove Instructions
First off, This Worm only affects Windows NT 4, Windows 2000 Professional and Server, Windows XP Home and Pro, and Windows Server 2003. It does not affect Windows 3.1, 95, 98 or ME.
Make sure you are logged into the computer with an account with Administrative Rights. On Windows XP machines, the primary user account usually has these rights.
- First, right click on your task bar, and select "Task Manager"
- Next, click on the "Processes" tab.
- If you have Windows XP or Windows 2003 Server, make sure the checkmark at the bottom labeled "Show Processes from all users" is checkmarked.
- Next, look for a process called "msblast" or "msblast.exe". If you see this, right click on this process, and select "End Process".
- Windows will give you a warning about terminating the process. Just click yes. If you do not see this item, skip to the next section.
- Next you must delete the infected file that may be causing your problem. Browse to your C Drive, then your WINDOWS directory if Windows XP, or your WINNT Directory if Windows 2000.
- Find the "system32" directory.
- In this directory, look for a file called "msblast" or "msblast.exe".
- DO NOT DOUBLE CLICK OR OTHERWISE RUN THIS FILE.
- Simply right click on the file and select "Delete".
B. Securing Your System
Next, go to this site and follow the instructions given to get the proper patch for your computer.
http://www.microsoft.com/security/security_bulletins/ms03-026.asp
This set of instructions should help you secure your computer against this threat.