From The Washington Post

Computers running Microsoft XP that are infected with the Blaster worm probably will experience immediate problems, with one of two likely results:

• Your Internet connection and computer may slow significantly as the worm uses them to search the Internet for other vulnerable systems.

• Your computer will give you a pop-up warning that it will restart in 60 seconds. The computer then restarts after the time expires. The restart warning and reboot are likely to repeat.

Here is a way to fix the problem, according to Atlanta-based Internet Security Systems Inc.:

1. Stop the reboot loop by pressing the "Ctrl," "Alt" and "Delete" keys simultaneously. Then search for a file in the pop-up "applications" list that will appear called "msblast.exe." Click the "msblast.exe" filename, then click the "end task" button to stop the worm from running.

2. Next, use the computer's search program to find the culprit file -- msblast.exe -- on the hard drive. To do this, click the "Start" button on the lower lefthand corner of your screen, then "Search." If your keyboard has a "Winkey" -- a key that displays the trademark Windows Icon -- you could alternately press the Winkey and the "F" key at the same time. This will bring up a search box.

3. Once you have the search prompt open, enter the search term "msblast.exe." Delete any matching files, then empty your recycle bin.

4. Next, turn on the firewall software built in to Microsoft XP. This will help protect your system from further Internet-based attacks.

5. Download the Microsoft software fix to protect your computer against the Blaster worm.

6. Unplug your Internet connection. Restart your computer. Once the computer is fully rebooted, reconnect it to the Internet.

7. If you have not been keeping up to date with the latest patches from Microsoft, go back to Windows Update and let Microsoft scan your computer for other critical updates. Download and install all of those listed.

8. Update your virus definitions, and/or install anti-virus software.

For more detailed information on the Blaster worm, see the following sites:
• CERT
• Computer Associates
• Internet Security Systems
• McAfee Corp.
• SANS Institute
• Security Tracker
• Sophos
• Symantec Corp.
• Trend Micro

As an alternative to Windows XP's built-in firewall, free firewall software can be downloaded from these vendors:
• Agnitum
• Kerio
• ZoneAlarm

-- Brian Krebs, washingtonpost.com

- Posted by Alan, 8:38 PM