Hi ,
You are just one of a million of those people complaining about
this worm ;" MSBLAST"
Do the followings step by step:
1. Shut down your computer
2. While shut down disconnect the phone line
3. Turn on computer but do not connect to the internet
4. Disable RPC Notification (Start button, Run, in Open
box type SERVICES.MSC, click OK, scroll halfway down and
double click the first Remote Procedure entry, click the
Recovery tab, for ALL failure dropdowns select TAKE NO
ACTION, click OK, exit the window
(If you see the shutdown message appears again, go to RUN from the Start, and type: shutdown-a
This will terminate the shutdown process)
5. Reconnect to the internet to download the virus
cleaning tool (I used Norton), and download the MS patch
and save both to a folder. Do not install yet.
A script to disinfect:
http://www.kellys-korner-xp.com/regs_edits/msblast.vbs
You can also download the patch from there.
6. Again physically disconnect from the internet and
disconnect the phone line.
7. Disable System Restore. Start button, right click "My
Computer" left click "properties", click the Restore tab,
click to check off "Turn off System Restore", click OK
button, click YES to disable System Restore.
8. Run the virus cleaning tool (DO NOT CONNECT TO THE
INTERNET)
9. Install the MS Patch (DO NOT CONNECT TO THE INTERNET)
10. Restart your computer.
11. Reconnect to the internet and run a scan. Your system
should be completely clean.
If you have troubles installing the patch, visit:
http://www.updatexp.com/cryptographic-service.html
I had the same problem , followed the same instruction , and killed the worm successfully.
