NT Authority shutting down your computer?
Originally posted by å
If you have already been infected, you need to do more than just install the patch.
These are instructions I've picked up elsewhere. I can't guarantee that they will work. I have not tested this. There may be a program out there to automatically fix this.
1. Locate "msblast.exe" (Generally located at C:\winnt\system32\msblast.exe)
2. Delete it.
3. Go to Start->Run, and type "regedit"
4. Navigate through the tree to "HKEY_LOCAL_MACHINE\Software\Microsoft\Window s\CurrentVersion\Run" and find the key labelled "windows auto update", which should contain "msblast.exe". Right click it, and select "delete".
5. Install the security patch so you don't have to do this again.
Again, these are just instructions that I have heard elsewhere. I cannot guarantee their accuracy.
oh, and I imagine you'll need to reboot afterwards.
If you have already been infected, you need to do more than just install the patch.
These are instructions I've picked up elsewhere. I can't guarantee that they will work. I have not tested this. There may be a program out there to automatically fix this.
1. Locate "msblast.exe" (Generally located at C:\winnt\system32\msblast.exe)
2. Delete it.
3. Go to Start->Run, and type "regedit"
4. Navigate through the tree to "HKEY_LOCAL_MACHINE\Software\Microsoft\Window s\CurrentVersion\Run" and find the key labelled "windows auto update", which should contain "msblast.exe". Right click it, and select "delete".
5. Install the security patch so you don't have to do this again.
Again, these are just instructions that I have heard elsewhere. I cannot guarantee their accuracy.
oh, and I imagine you'll need to reboot afterwards.
Ran fix ... PC still kept rebooting. Ideas?
You can do this to stop the computer restarting each time and give you time to install the patch.
go to START, CONTROL PANEL,ADMINISTRATIVE TOOLS,COMPONENT SERVICES
then select SERVICES (local) from the left hand window. Find "REMOTE PROCEDUE CALL (RPC)" from the right hand window, right click, porperties. From the RECOVERY tab you can then set it so windows won't reboot each time.
go to START, CONTROL PANEL,ADMINISTRATIVE TOOLS,COMPONENT SERVICES
then select SERVICES (local) from the left hand window. Find "REMOTE PROCEDUE CALL (RPC)" from the right hand window, right click, porperties. From the RECOVERY tab you can then set it so windows won't reboot each time.
Ok, do above fix then run patch, seems to resolve. If you're behind a router/firewall, block the ports it utilizes and you're going to be ok.
Also ... Final instructions to fix infected PCs:
1. Locate "msblast.exe" (Generally located at C:\winnt\system32\msblast.exe)
2. Delete it.
3. Go to Start->Run, and type "regedit"
4. Navigate through the tree to " HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr
entVersion\Run" and find the key labelled "windows auto update", which should contain "msblast.exe". Right click it, and select "delete".
5. Install the security patch so you don't have to do this again.
Also ... Final instructions to fix infected PCs:
1. Locate "msblast.exe" (Generally located at C:\winnt\system32\msblast.exe)
2. Delete it.
3. Go to Start->Run, and type "regedit"
4. Navigate through the tree to " HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr
entVersion\Run" and find the key labelled "windows auto update", which should contain "msblast.exe". Right click it, and select "delete".
5. Install the security patch so you don't have to do this again.



Thank god I have a mac! The last virus that was of any level of seriousness was in '96...