Q-C Online support pages
Technical support article

W32.Blaster.Worm and W32.Welchia.Worm
Removal Tools

IMPORTANT NOTE: You must be logged in as an Administrator to do this. If you are not logged in as an Administration, the System Restore tab will not be displayed. If you do not know how to log in as Administrator, contact your system administrator (if on a network), the computer manufacturer, or installer.

1. For MsBlaster infections, download the FixBlast.exe file from: http://securityresponse.symantec.com/avcenter/FixBlast.exe .

For Welchia infections, download the FixWelch.exe file from: http://securityresponse.symantec.com/avcenter/FixWelch.exe

As of April of 2004, a new variant had arrived. Download the removal
tool as well as instructions for the new version of the Blaster virus from: http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.t.worm.html

2. Save the file to a convenient location, such as the Windows Desktop

3. Close all the running programs before running the tool.

4. If you are running Windows XP, then disable System Restore.

CAUTION: If you are running Windows XP, we strongly recommend that you do not skip this step. The removal procedure may be unsuccessful if Windows XP System Restore is not disabled, because Windows prevents outside programs from modifying System Restore.

To disable Windows XP System Restore:

NOTE: These instructions assume that you are using the default Windows XP Start Menu and have not changed to the Classic Start menu. To re-enable the default menu, right-click Start, click Properties, click Start menu (not Classic) and then click OK.


I. Click Start.

II. Right-click the My Computer icon, and then click Properties.

III. Click the "System Restore" tab.

IV. Check "Turn off system restore" or "Turn off system restore on all drives" as shown in this illustration:

V. Click Apply. As noted in the message, this will delete all existing restore points. Click Yes to do this.

VI. Click OK.

5. Return to the Windows Desktop and double-click the FixBlast.exe file to start the removal tool .

6. Click Start to begin the process, and then allow the tool to run.

NOTE: If, when running the tool, you see a message that the tool was not able to remove one or more files, run the tool in Safe mode. Shut down the computer, turn off the power, and wait 30 seconds. Restart the computer in Safe mode and run the tool again. All the Windows 32-bit operating systems, except Windows NT, can be restarted in Safe mode.

7. Restart the computer when prompted

8. Re-enable System Restore:

To enable Windows XP System Restore:

I. Click Start.
II. Right-click My Computer, and then click Properties.
III. Click the "System Restore" tab.
IV. Uncheck "Turn off system restore" or "Turn off system restore on all drives."
V. Click Apply, and then click OK.


10. Run Windows Update by going to Tools and Windows Update or click the link below for the operating system of your computer:

Windows XP:
http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

Windows NT 4.0 Server:
http://microsoft.com/downloads/details.aspx?FamilyId=2CC66F4E-217E-4FA7-BDBF-DF77A0B9303F&displaylang=en

Windows 2000:
http://microsoft.com/downloads/details.aspx?FamilyId=C8B8A846-F541-4C15-8C9F-220354449117&displaylang=en

11. Run the update portion of your Anti-virus software and scan your machine for viruses



Local events heading








  Today is Tuesday, Sept. 16, the 259th day of 2014. There are 106 days left in the year.

1864 — 150 years ago: A fine lumber mill is on the course of erection at Andalusia. A flouring mill at that location is doing a fine business.
1889 — 125 years ago: J.B. Lidders, past captain of Beardsley Camp, Sons of Veterans, returned from Paterson, N.Y., where he attended the National Sons of Veterans encampments.
1914 — 100 years ago: President Wilson announced that he had received from the imperial chancellor of Germany a noncommittal reply to his inquiry into a report that the emperor was willing to discuss terms of peace.
1939 — 75 years ago: Delegates at the Illinois Conference of the Methodist Church in Springfield voted to raise the minimum pay of ministers so that every pastor would get at least $1,000 annually.
1964 — 50 years ago: An audience of more than 2,600 persons jammed into the Davenport RKO Orpheum theater with a shoe horn feasted on a Miller-Diller evening that was a killer night. Phyllis Diller sent the audience with her offbeat humor. And send them she did! It was Miss Diller's third appearance in the Quad-Cities area.
1989 — 25 years ago: A few years ago, a vacant lot on 7th Avenue and 14th Street in Rock Island was a community nuisance. Weeds grew as high 18 inches. Today, the lot has a new face, thanks to Michael and Sheila Rind and other neighbors who helped them turn it into a park three weeks ago.





(More History)