How do you remove the w32 blaster worm from your computer?

Answer 1

W32 blaster worm is not coming alone, when you get this w32 blaster worm infection, you are probably have anotther rogue software named Security Protection or Malware Protection thing. You can restart the infected computer, press F8 to choose "safe mode with networking", press Enter, you will be able to get in "safe mode with networking. After that, follow this guide to manually remove w32 blaster worm and fake Security Protection or whatever it goes by.

• Open Registry Editor (in Windows XP, go to Start Menu, run, type in "Regedit" and press OK; in Windows 7 & Windows Vista, go to Start menu, Search, type in "Regedit"), find out the following fake Security Protection registry entries and delete:

HKEY_CURRENT_USER\Software\Security Protection HKEY_CLASSES_ROOT\BrcWizApp.BrcWiz HKEY_CLASSES_ROOT\BrcWizApp.BrcWiz.1

HKEY_CLASSES_ROOT\CLSID\{80c10400-59cb-4c79-97ce-cc693103afca} HKEY_CLASSES_ROOT\Interface\{4B66E1DF-4DE3-4CDA-83B5-11673EADAB0B} HKEY_CLASSES_ROOT\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5} HKEY_CLASSES_ROOT\TypeLib\{58B4E0F5-F122-4C02-B038-C482D998486A} HKEY_CURRENT_USER\Software\Microsoft "adver_id" = "29″ HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe;"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Security Protection"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "rundll32″ = ""

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "\Application Data\defender.exe" /sn" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system "EnableLUA" = "0″

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "rundll32″ = ""

• The associated files of Security Protection to be deleted are listed below:

%Documents and Settings%\[User Name]\asr.dat

%Documents and Settings%\[User Name]\Application Data\1tmp.bat %Documents and Settings%\[User Name]\Application Data\defender.exe %Documents and Settings%\[User Name]\Application Data\scan.dll %Documents and Settings%\[User Name]\Application Data\[random].tmp %Documents and Settings%\[User Name]\Desktop\Security Protection.lnk %Documents and Settings%\[User Name]\Start Menu\Security Protection.lnk