Sorry Emma...I replied to the wrong post. Here's the one I sent you:
It sounds like you have the MsBlaster worm.
The worm interferes with the RPC service and causes the computer to
shut down. To stop it shutting down (assuming XP), go to start/control
panel/administrative tools/services/RPC (Remote Procedure Call). Right
click RPC (not RPC Locator) and click properties. Look under
'Recovery' tab in the windows First Failure, Second Failure, etc.
Change them all to 'Take No Action'.
You have to get this done before the timeout. I think it's about 60
seconds. I've heard you can type 'shutdown -a' at a command prompt to
stop it shutting down, but I managed to do the procedure described
above pretty easily in the time allowed.
That prevents the computer shutting off and now you can get on the
internet. Go to the Symantec website and look up the MsBlaster Worm
fix. They have an exe file that will fix the problem.
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html
Look for a hyperlink on this page called 'tool', under 'removal'.
Follow the link and d/l fixblast.exe.
***Be sure to get the Microsoft Hot Fix that addresses this
vulnerability in XP. Symantec has a URL for the fix.
***Be aware the worm may be in a restore point as well. I don't know
if Symantecs fix cleans up the restore point.
Alternately, if you are experienced with the registry, look under the
key HKLM/software/microsoft/windows/currentversion/Run. The 'Run'
subkey holds your startup programs that start automatically. You
should see a reference to MsBlast.exe. Remove this sub key. If it's
not there, look under the key HKCU with same sub-keys as above.
There is other data to remove in order to get the worm right out
of your system. That's why it's easier to use the Symantec remover.
You will find all kinds of instructions on the net regarding the
MSBlaster worm and how to remove it.
