Win2K Blaster Worm?

[MrB]

I have a W2K computer that is a member of a domain. When the computer is
started, it boots normally until it is time to log in. At that time, a
message comes up that is similar to the old blaster message about windows
shutting down in 60 seconds. The diff is, this message reports that shutdown
will occur in thousands of days. It shuts down within a minute anyway and
restarts. Since I couldn't log into the network nor my desktop, I pulled the
drive and slaved it to a drive on another computer. I ran a Symantec scan on
the drive using Symantec AV Corporate, ver 9.........no finds. I ran a Trend
Micro online scan and it found 3 files related to Browser hijack. We deleted
those files. This had no effect on the problem. My administrator password
won't work either. That could be related to some other reason. It looks like
if I can't log in, I won't be able to fix the prob. Any suggestions?

 

[Guest]

Are you logging onto the local PC, or to the Domain?

Are you the Domain Administrator?

Are you the local PC administrator?

Wc

 

[MrB]

I am trying to log onto the domain as the user, but never get to the logon
screen.

I am not the domain administrator.

I have also tried logging onto the local computer.

I am the local computer administrator.

 

[Budd]

Have you gone this route?

http://tinyurl.com/jqdf

 

[MrB]

Yes, I have. However, I have not tried running Fixblast from a floppy. I
don't know if it will work if the computer hasn't finished loading windows,
but I will try it.

 

[Guest]

Boot to safe mode. One method is to tap the F8 key once a second during the
boot process

Perhaps, then you can examine the event viewer log.

 

[MrB]

Can't boot to safe mode. Cannot log in under any circumstances. Shutdown
message comes up before the login window.

 

[Colon Terminus]

I have a W2K computer that is a member of a domain. When the computer is
started, it boots normally until it is time to log in. At that time, a
message comes up that is similar to the old blaster message about windows
shutting down in 60 seconds. The diff is, this message reports that shutdown
will occur in thousands of days. It shuts down within a minute anyway and
restarts. Since I couldn't log into the network nor my desktop, I pulled the
drive and slaved it to a drive on another computer. I ran a Symantec scan on
the drive using Symantec AV Corporate, ver 9.........no finds. I ran a Trend
Micro online scan and it found 3 files related to Browser hijack. We deleted
those files. This had no effect on the problem. My administrator password
won't work either. That could be related to some other reason. It looks like
if I can't log in, I won't be able to fix the prob. Any suggestions?

I saw this just last week on a clients computer.
In that case, it turned out to be a bad RAM chip that had corrupted some
critical system files.
I wound up completely reloading Windows after a failed in-place upgrade.
I didn't discover the faulty RAM chip till after I tried the upgrade.

 

[MrB]

That's amazing!

I saw this just last week on a clients computer.
In that case, it turned out to be a bad RAM chip that had corrupted some
critical system files.
I wound up completely reloading Windows after a failed in-place upgrade.
I didn't discover the faulty RAM chip till after I tried the upgrade.