Had to restore now blaster has surfaced again

  • Thread starter Thread starter BobMack
  • Start date Start date
B

BobMack

I had a problem with my XP pro and was forced to F8 and restore to an
earlier point just so i could get back into my system.
I was finally able to reinstall drivers etc and get back up and running. I
was on the net and after about 45 minutes the blaster message (rpc shutdown)
popped up. So after i rebooted, I went and d/l FIXBLAST.exe and it turned up
nothing. I upgraded my virus definition and scanned and it turned up
nothing.
So I igored it at this point and then after being connected to the net for
an hour i got it again.
My latest trek is once again to d/l all the recent updates to windows which
seems to have been lost since i did a restore. Hopefully this will work. I
cannot test it since it since i had to leave for work so i will when i get
home.

Can anyone tell me why this virus is not being detected the second time
around? I am just preparing for the worse once i get home. If the updates
dont correct the problem i will be fresh out of ideas. SO please help in
advance with any ideas.... thanks
 
Microsoft as well as all of the anti-virus sites have
instructions on how to remove the blaster worm, once it
is removed shut off messenger service in admin
tools/services and get a firewall
 
Yes.... i know this already.... but i could not find on MS or any antivirus
site thats tells you how to get rid of it if it can't be detected!
I got rid of the 1st intitial virus months ago without any problem
 
And after you did your restore did you immediately turn on your firewall and
perform all Windows updates? If not, that's why you got it again. As far
as the MS site - all you should have to do is search for "blaster" in the
knowledge base and you'll find it.
 
When you restored, did you also remove the restore files that may also have
contained the virus? Did you turn restore off, reboot and then turn it back
on?
If not there may be traces of it in the System Volume Information folder.
I'm not sure this will help........
 
How to Access the System Volume Folder

XP uses a hidden system folder called the System Volume folder to store
information needed to create restore points for the System Restore feature.
Sometimes a file in this folder might contain a virus. You can get rid of it
by turning off System Restore and deleting all the restore points, but that
might not be the best solution. It's possible to keep the existing restore
points and just get rid of the offending file, but you'll need to use the
info in KB article 309531 to access the folder. Find out how at:
http://www.winxpnews.com/rd/rd.cfm?id=031007HT-System_Volume
 
I totally understand the need for that but was did not get my firwall up in
time.... but that is not what i am really concerned with at this point....
whats done is done....
I am more concerned with why FIXBLAST cannot see it nor can my Norton2003.
How can i be sure its gone from my system if niether is picking up on it? I
can and am in the midst of downloading all the MS updates again but I am not
sure this will fix the problem if the blaster cant be found?
I can find lots of info on the blaster in the knowledge base... but I cant
find this problem!
Anymore help would be appreciated.
Thanks
 
I had a safe restore point setup that I made after i got rid of the intitial
Blaster circulation. But when i had to restore my system yestrday I did not
get the option as to what restore to use so i am guessing it picked one up
from a previous restore point. But yes when i did get rid of the virus
initially i did turn off restore.
Thanks for your help and looks like i have my work cut out for me tonight!
 
Thats great Patty... thanks so much for your help... this sounds like what i
may need...
 
Good Luck and I hope this helps.......But I forgot to mention that when you
turn it back on(restore) manually create a new restore point...
 
i am having problems at start up similar to issue that
occured whwn I had the balster virus, what is the d/l
fixblast.exe that you are refering to, I would like to
run that ?
 
Back
Top