Unsolved

This post is more than 5 years old

37 Posts

2409

February 23rd, 2004 15:00

W32/Blaster.Worm.a and W32/Blaster.Worm.b Virus

My Dimension 4550 has been attacked by the subject two virus according to McAfee VirusScan. When I get to the desktop I receive: SPRINGFLD_ADV_DAEMON:WkCal.exe - Entry Point Not Found. EntryGETIUMS...MSDART.DLL ...SYS32\MSBLAST.EXE effected by W32/Blaster.Worm.a and SYS32\TEEKIDS.EXE effected by W32/Blaster.Worm.b ... Then I get a NT Authority\System Shutdown. Every approximately 30 secs. the system shuts down and restarts. Any suggestions as to how I can resolve this problem.?

Marine167

 

 

3.9K Posts

February 23rd, 2004 15:00

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html#removalinstructions

use the instructions from the above site first then the hijackthis instructions below
-------------------------------
A post of a hijackthis log for the experts to advise.
HijackThis From Here
or one of these other links:-
http://www.merijn.org/files/hijackthis.zip
http://www.aluriasoftware.com/tools/hijackthis.zip
http://mjc1.com/mirror/hjt/

Important: Create a folder on the C: drive called C:\HJT.
You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HJT.
Unzip HijackThis into this folder. When you run HijackThis from this folder and have it "Fixed checked" it will create a backup file of modifications to use if restore is necessary. Then run, scan, save log, then in notepad copy the FULL log by copy and paste as a reply to this post and an expert with HijackThis Knowldge, will have a go at giving advice. Please note the list of experts names below, very few forum regulars here have had this training.

DO NOT FIX ANYTHING WITH HIJACKTHIS WITHOUT EXPERT ADVICE
, most of what it finds you need for normal MS Windows tasks.

Known Spyware HijackThis fighters in DellTalk - If you are, and are not on the list please PM Me.

TomCoyote (of http://tomcoyote.org/forums/index.php fame)
YoKenny (Accredited Expert at TomCoyotes)
baskar1234 (Spyware Classroom Teaching Assistant at TomCoyotes)
ChrisRLG (Spyware Classroom Teaching Assistant at TomCoyotes)
Tuxedo Jack (Spyware Classroom Teaching Assistant at TomCoyotes)
Yellowhammer (In Training at TomCoyotes)
therock247uk (In Training at TomCoyotes)
irelynmisses (In Training at TomCoyotes)


You could also go to one of the more specalist forums where more experts will be able to help.
http://www.net-integration.net/cgi-bin/forum/ikonboard.cgi (Home of Spybot S&D)
http://boards.cexx.org/index.php
http://www.wilderssecurity.com/index.php
http://tomcoyote.org/forums/index.php
http://forums.spywareinfo.com/index.php
Do read the sites FAQ before posting, and advise your problem and what steps you have already done to try to cure your problem.

I, and the other hijack experts mentioned above, are in all those sites (and more) with the same login names. You might get one of us at those sites also to anwser your log, but other experts will also be available.

37 Posts

February 23rd, 2004 18:00

As soon as the desktop loads I receive the first warning and then I have approximately 60 secs. before my PC reboots. I was told to try: Click Start > Run then type in: Shutdown -a and this would give me enough time to install Microsoft Patch. I tried this but it didn't work. Is there a way to delay the reboot so I can install the patch?

3.9K Posts

February 24th, 2004 06:00

Download the prog on another machine, use a CD or floppy (if it will fit) and run your machine is safe mode (F8 at boot) That might work.
No Events found!

Top