can't remove blaster variant

From: Andreas Strohkirch (webmaster_at_media-networks.de)
Date: 09/19/04 

Date: Sun, 19 Sep 2004 05:50:54 +0200

Hi,
my system seems to be infected by the blaster virus, similar to W32.Nachi.A
and I can't remove it!!! My internet connection is breaking down and I got
several processes, which start automatically anew, when I am stopping them:

alg.exe (only sometimes)
dllhost.exe (only sometimes)
svchost.exe (always, the instance which is permanently sending data into the
net)

Also when I try to stop the process inetinfo.exe'', all the above tasks will
start at once and the inetinfo.exe won't close.

I have tried the following:
- closed the security holes with several MS patches
- set up my firewall
- checked my system with many different anti virus programs, they all can't
find any virus!!!!
- searched for tasks and services to stop them (I can't find the known ones
described by the virus descriptions)

So what can I do to remove the virus?
Is it an unknown blaster variant?
Has anybody made a similar experience?

I am very thankful for every help!
Andreas Strohkirch.

Relevant Pages

  • Re: windows update and blaster
    ... Archie, that may not be the blaster virus causing the error message. ...
    (microsoft.public.windowsxp.basics)
  • Large Amounts of Data be Uploaded
    ... I agree this sounds like blaster virus. ... >This problem presists even when I use different ISPs. ... >Windows 2000 Professional ...
    (microsoft.public.win2000.security)
  • Re: need serious help
    ... > mydoom and blaster virus after removing the mydoom virus ... > internet but nothing else and i have tried downloading ...
    (microsoft.public.windowsxp.general)
  • need serious help
    ... mydoom and blaster virus after removing the mydoom virus ... internet but nothing else and i have tried downloading ...
    (microsoft.public.windowsxp.general)
  • Computer shut-down
    ... >This does not appear to be a Blaster Virus problem. ... two computers are affected, ... >MS03-026 says the Blaster Virus does not affect Windows ... >college where she works to immediately download a ...
    (microsoft.public.windowsxp.security_admin)