Windows XP Safe Mode

[Patrick]

In order to removed the msblast.exe file, I need to
reboot in safe mode. However, on my Windows XP Home
Edition, when I click on "Turn Off Computer", the only
three options I get is "Stand By", "Turn Off"
and "Restart"...

Also, is msblast.exe really the virus file or "good" one?
Not sure if it has to be msblastER.exe to be the bad one?

Pat

 

[Lanwench [MVP - Exchange]]

Do restart, and press F8 during startup to go into safe mode.

See http://www.visualante.org/msblast/main.htm for lots of good
info....and/or follow the instructions below.

If you can't stop your computer from restarting:

As soon as your computer reboots and Windows loads, click Start, then Run.
In the box, type the following:

shutdown -a (then click OK)

Install:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp
As soon as you can!. You are running the 32-bit edition of Windows XP, btw;
you'd know if you weren't, trust me.


If you get
setup could not verify the integrity of the file
/ cryptographic services message, see
http://support.microsoft.com/?scid=kb;en-us;326815 (for XP) or
http://support.microsoft.com/?id=281458 (for Win2k)


For the removal tool for the worm, see
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

Get a firewall! You NEED one. There are several free ones, including
Sygate ( www.sygate.com )

Then go to WindowsUpdate to pick up the latest updates:
http://windowsupdate.microsoft.com. (You should do this about once a month
anyway, at least)

More info about the worm:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html
and http://support.microsoft.com/?scid=kb;en-us;823980

You also need good antivirus software - for personal use, AVG 6.0 is free -
www.grisoft.com - set it to update daily.

 

[Doug Knox MS-MVP]

After restarting the computer, watch the boot, and right after the POST
(Power On Self-Test) and before XP begins to load, press the F8 key. You may
need to press it a few times. You'll get the boot menu.

However, see http://www.kellys-korner-xp.com/xp_qr.htm#rpc for a small
utility that will allow you to remove this worm.