blaster removed - still have NT authority\system shutdown

[Richard Sauer]

Blaster was found and removed. Patch from MS was used.
Windows XP home reinstalled. All service pacs were
installed. Blaster patch reinstalled. XP firewall turned
on. McAfee firewall turned on. msblast.vbs found no
blaster and did no repairs. HP drivers uninstalled and
new ones downloaded and installed. NOW... I still get the
NT authority\system shutdown w/ RPC svc termination
unexpected. It is a randon shutdown and it gives me 60
sec. How do I fix this?

 

[zessler]

was system restore disabled when you did all this?

if not then all you was for nothing

 

[ed]

Hi:
Try this one
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.rem
oval.tool.html

 

[Steve Nielsen]

To stop the repeating shutdown use the 60 seconds to do this:

Start - Run - type in "shutdown -a" (without quotes) and hit enter. That
should stop the shutdown and allow you to proceed.

Go here and get fixblast.exe removal tool:

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

make special note of:

"In many cases, you will need to do this before you can continue with
the removal instructions. If you are not able to remove the infection or
prevent re-infection using the following instructions, first download
and install the patch."

In other words, you got re-infected before you got the patch in place at
some point or other. You may have the firewalls in place and you may
even have the patch installed but you still have mblast.exe running.

Steve

 

[Malke]

What is System Restore?

Disconnect the computer from the network. Go into Safe Mode (tapping F8
as the computer starts up). Go to Control Panel>System and you'll see a
tab called "System Restore". Check the box that says "disable System
Restore". Reboot back into Safe Mode. In Safe Mode, run the Blaster
removal tool. Still in Safe Mode, do a full scan of your machine with
your antivirus. When the machine is clean, reboot into normal mode.
Apply the MS os patch. Then click on Help & Support and starting
learning something about Windows XP basics, like System Restore.

Malke