System shutdown, against my will

[Ø]

Deleting msblast.exe may allow you to be re-infected, but the good thing is if you find and kill it, the problem does bugger off long enough for you to get a patch.

It's funny how you guys say you can't find it... because I found multiple copies of it I must be really unsecure!

I had the patch already I just wanted the thing off my system

[RSL]

Hmm, the scan is stopping on a file in my temp folder too.

I have been unable to delete my temporary internet files. No matter what method I use, it freezes up.

I still can't get the patch to work. Now when I run windows updates it tells me that it can only be done from an adminstrator account. This computer only has one user account, and that's me. I should be able to do anything from it (and windows update has always worked in the past...)

I might have to do that reformat yet...

[Citizen Bleys]

I just removed the Full Control permission from the Everyone group, so you have to be Administrator to write *anything* to my hard drive. Hence, the program can't get installed.

[RSL]

Originally posted by Loony BoB
I deleted every last one of my Temporary Internet Files until I narrowed myself down to only having one file remaining, this was under Temp - Content.IE5, in one of those many jumbled folders. I couldn't rename, delete, access properties or anything, but it was still there. I ended up trying something else - opened up command prompt, moved into that directory and ran <b>dir/w</b>, and found only that file. I ran <b>del *.*</b> and it was gone.

I did this, and everything was going great, but when I ran the del *.* it didn't delete the file...

This is driving me insane.

EDIT: I was just being an idiot.. it's been a long time since I've done anything with DOS. Guess I'll see how this goes...

[Tom Morello]

I got that same message right now... but it seemed more like a copy... cause like... it was a pop up, and when I control + alt + delete then end tasked it, it went away and my system didn't shut down...

Is this what you guys are talking about? Or can you not end task the real thing?

[crono_logical]

Interesting idea. I tried myself after forcing a similar situation on a test PC I have (Win2k), and found I get Access Denied if I attempt to kill the process doing the shutdown through Task Manager. However, I can kill it and prevent the shutdown using alternate process tools for WinNT systems.

Since you used the normal Task Manager though (which gives Access Denied if you try to end task through there), I think you might have got one of those annoying Messenger pop-up things disguised as one, but I'm not sure.

In any case, you should be patching your PC anyway, wouldn't be good if you suddenly got the message while you quickly left the room to do something and you return to find the PC off

[Loony BoB]

Originally posted by RSL
I did this, and everything was going great, but when I ran the del *.* it didn't delete the file...

This is driving me insane.

EDIT: I was just being an idiot.. it's been a long time since I've done anything with DOS. Guess I'll see how this goes...

I'm not sure if your edit meant that you were able to solve your problems or not. Are you fixed up yet?

[Yamaneko]

If you don't want your OS to restart while you're getting the patch (and you don't want to get a Firewall) just go into Administrative Tools > Services > Remote Procedure Call (RPC) > right click > Properties > Recovery > switch the fields that say "Restart the Computer" to "Restart the Service".

That should do it.

[RSL]

Well, I'm pretty sure that I don't have this worm/virus thing. There's no trace of it on my computer. I was able to run the scan completely but it came up with nothing.

Right now I'm having a heck of a time getting the patch to install, but I suspect that's because of my computer settings, not because of this worm/virus.

But I don't think I'll have to reformat since I don't appear to have this thing. Thank you everyone who attempted to help me, I appreciate it a lot!

[Dr Unne]

Just a word of advice in general. Running a firewall (assuming you know how to use it) would've completely protected everyone from this virus. If you want a free firewall that's pretty easy to use, http://www.zonelabs.com/store/conten...ap_za_grid.jsp is a pretty good one. Or if you can find an old version of Tiny Personal Firewall that's free, that's good too. But running a firewall would protect you against attacks like this, and it'd also let you know when you have a virus that's trying to make connections OUT of your computer to other computers. It's always a good idea to run a firewall.

[Loony BoB]

I have no idea why, but ZoneAlarm didn't save my machine. =/

[Yamaneko]

Originally posted by Loony BoB
I have no idea why, but ZoneAlarm didn't save my machine. =/

Could be very possible that you allowed it to connect to your computer when your firewall prompted you.

[Loony BoB]

Hrmm. I can't think of any time in the past few months that I've even been prompted, actually. I have everything unrecognised automatically set to block unless it's originating from my computer, and then I get prompted. The only time I've been prompted lately is when I installed a new game, but that was after I removed the worm, so go figure. I think I got it while I was on holiday, actually. I leave my computer on 24/7.

[Ø]

Hmm, the "blaster worm" as they are calling it... has only just been reported on Sky News

My god they're slow... by the time they've started a scare we've all learned to kill it By the way Yamaneko, that was good advice, I certainly would never have thought to do that!