On 13 January 2004, Microsoft released a tool to Windows Update/Software
Update Services (WU/SUS) which, when installed, will scan a system for the
presence of Blaster, Nachi and the most common variants of these worms, and
automatically remove these worms from the system. This tool was posted to
the Download Center on 5 January 2004. It is now being offered as a
"Critical Update" and will be offered for download to Windows Update
clients.

The tool is designed to install only on Windows 2000 (SP2 and above) and
32-bit Windows XP systems that have already applied MS03-026 or MS03-039.
Also, WU/SUS will only offer the tool to machines that are infected with the
worms that the tool removes. This tool scans the system when installed: it
is not a real-time scanner nor does it perform periodic scans.

Microsoft has published a Knowledge Base article, 833330, that details the
tool and instructs customers how to use the tool.

If you have any questions regarding the tool or its implementation after
reading the above listed Knowledge Base article, you should contact Product
Support Services in the United States at 1-866-PCSafety (1-866-727-2338).
International customers should contact their local subsidiary.
--
Regards,

Jerry Bryant - MCSE, MCDBA
Microsoft IT Communities

Get Secure! www.microsoft.com/security


This posting is provided "AS IS" with no warranties, and confers no rights.

RE: Blaster Cleaner Tool Available by anonymous

anonymous
Mon Jan 26 13:26:06 CST 2004

I apologize. I did find reference to it at http://support.microsoft.com/?kbid=833330. "Additionally, the KB833330 critical update will not be available to install from Windows Update or through Automatic Updates if the KB833330 critical update is already installed or if your computer does not appear to be infected with the Blaster virus or the Nachi virus." However, I still wonder if this is true as I distrinctly remember installing it on non-infected machines.
Thanks again, Dean Halter