News

Microsoft Provides Blaster Removal Tool

Microsoft posted a tool in its Download Center on Tuesday for removing several variants of the Blaster worm.

Blaster emerged in August to exploit a gaping security hole in Windows that Microsoft provided a patch (MS03-026) for the previous month. The worm crashed vulnerable computers, slowed local subnets and generated a tremendous amount of scanning traffic on target ports around the Internet. A later discovery that the underlying vulnerability was wider than Microsoft originally thought prompted a second patch (MS03-039).

"Even though many users have applied the MS03-026 or MS03-039 security patches for Windows, research shows there is a home user population that have not taken the step to disinfect the virus and thus may still be infected by the Blaster worm," a Microsoft spokesperson said.

Internet backbone providers have told Microsoft that traffic levels on their networks are still high in the wake of the worm. According to Microsoft, infected home systems are still actively transmitting the worm and contributing to Internet congestion. The company says that many affected users would have no warning of the infection other than a slight performance problem.

The new tool, the Windows Blaster Worm Removal Tool, is designed to help customers remove common forms of the Blaster worm from infected PCs. The tool runs on systems that have MS03-026 or MS03-039 installed. It is available for download at: www.microsoft.com/downloads.

Development of worm and virus removal tools is an area that Microsoft has traditionally left to anti-virus vendors, many of whom created Blaster removal tools months ago. Those tools are often available for free download and can be used independently of licensed copies of the anti-virus software. Releasing a Blaster removal tool is one of the first steps Microsoft has taken into anti-virus companies' territory since acquiring anti-virus talent of its own with the June purchase of the intellectual property and technical assets of GeCAD Software Srl, an 11-year-old Romanian anti-virus firm.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Motherboard Image

    Darktrace Deal To Bring AI Security to Microsoft Products

    Microsoft and security solutions firm Darktrace plan to integrate the latter's AI products with Microsoft Azure, Azure Sentinel and Microsoft Defender for Endpoint.

  • 2021 Microsoft Conference Calendar: For Partners, IT Pros and Developers

    Here's your guide to all the IT training sessions, partner meet-ups and annual Microsoft conferences you won't want to miss.

  • Microsoft Updates Azure Icon, Plans Default Font Change

    Microsoft recently announced a few planned design changes, including a new Azure icon.

  • The 2021 Microsoft Product Roadmap

    From Windows 10X to the next generation of Microsoft's application server products, here are the product milestones coming down the pipeline in 2021.