Hi Bonnie- I can try to help you by using System Restore.
The first thing you should do is check to see that your Firewall is enabled.
If the machine is just rebooting over and over again so you cant enable the
firewall, first take it off the network by disconnecting your network
connection so its completely standalone.
How to Enable Internet Connection Firewall (ICF) on Windows XP
1.. On the taskbar at the bottom of your screen, click Start, and then
click Control Panel.
2.. Click the Network and Internet Connections category.
(If the Network and Internet Connectionsis not visible, click Switch to
Category View under Control Panel on the left side of the Control Panel
window.)
3.. Click Network Connections.
4.. Right-click the Dial-up, LAN, or High-Speed Internet connection that
you use to connect to the Internet, and then click Properties from the
context menu.
5.. On the Advanced tab, under Internet Connection Firewall, select
Protect my computer or network, and then click OK.
The Windows XP firewall is now enabled.
Now launch System Restore (start, all programs, accessories, system tools,
system restore) and select the option to restore your machine to an earlier
time.
If you pick a restore point way before you connected to Norton but from a
day you know the system was working well.....go ahead an do a restore to
that point.
That will remove the MSBlaster files, and replace your current blaster
modified registry with a pre-modified/infected backed-up copy. The trick
here is your going to have to be careful about going far enough back that
your sure its a preinfected state. Since the MSBlaster symptoms appear to
happen within 30-60mins of infection - you should be able to do it.
Once you restore and your sure its the right place, Go to the system restore
tab under the system applet and disable then re-enable System Restore. This
will get rid of any backed up copy of the blaster files or infected
registry.
After you restore BE SURE the firewall is enabled, because now your going to
reconnect to the net and download the patch to fix and prevent blaster.
If alls good reconnect to the net and go immediately to the
http://www.windowsupdate.com site to get the Security Update.
When you get to the Windows Update site, scan your computer for any critical
updates that you need, and then install them. To do that:
1.. Click Scan for Updates next to the green arrow near the center of your
screen.
Note It may take several minutes for the scan to complete.
2.. After the scan completes, under Pick updates to install on the left
side of your screen, click Critical Updates and Service Packs.
A list of updates appears.
3.. Click Review and install updates near the center of your screen to
begin downloading and installing the updates.
Use antivirus software and make sure you have the latest updates installed.
There are several variants of this worm, and the most up-to-date information
about them can be found at your antivirus vendor's Web site.
a.. If you already have antivirus software installed, go to your antivirus
vendor's Web site to get the latest updates, also known as virus
definitions.
b.. If you do not have antivirus software installed, get it. The following
vendors participating in the Microsoft Virus Information Alliance (VIA)
offer antivirus products for home users:
a.. Network Associates
b.. Trend Micro
c.. Symantec
d.. Computer Associates
Lastly if you think there is still the slightest chance your computer is
still infected, use the free worm removal tool available at your preferred
antivirus software vendor's Web site:
a.. Network Associates
b.. Trend Micro
c.. Symantec
d.. Computer Associates
Hope this helps Bonnie- you can find more information and these steps on:
http://www.microsoft.com/security/incident/blast.asp
Bobbie Harder
PM, System Restore
