Re: MBlast Symptoms - MBlast not found???

From: Parley D. Kennelly, CPA (parley_at_reissjacksonnot.com)
Date: 08/01/05

  • Next message: Robert Moir: "Re: MBlast Symptoms - MBlast not found???" 
    Date: Mon, 1 Aug 2005 11:11:00 -0700

    "Robert Moir" <robspamtrap+msnews@gmail.com> wrote in message
    news:%23si5r$rlFHA.3380@TK2MSFTNGP10.phx.gbl...
    > Parley D. Kennelly, CPA wrote:
    >> My computer has started exhibiting the NT\Authority System shutdown
    >> due to a Remote Procedure Call error and when I search for it on
    >> Google, Google Groups, MSN, Microsoft KB, Symantec, etc. I always get
    >> the same result - MBlast. I did a fresh install of WinXP SP2 and
    >> installed Norton Internet Security prior to going online and I still
    >> get the same problem.
    >> I've run the MBlast removal tool from Symantec and it doesn't find it
    >> on my system at all.
    >>
    >> Let me know if you need more information to help or if you have any
    >> suggestions on what else might be causing this problem.
    >
    > You might have a system problem caused by a different item of malware, or
    > it may be nothing to do with malware at all.
    >
    > This error is generated by a failure with a system component which XP
    > believes is vital to its well-being. When one of these processes dies the
    > system shuts itself down because it believes it isn't viable in that
    > condition.
    >
    > MS Blaster caused this symptom as a side affect of its attack, which
    > caused such a component to fail.
    >
    > So the question is, what is causing this component to fail? Have you made
    > any recent changes to this system, including upgrading or changing things
    > like virus scanners or other things that closely monitor system behaviour,
    > file system, etc?
    >
    > Can you run 'shutdown -a' from a command prompt to halt the shutdown? And
    > if so, do you see any evidence of what process is being killed, from the
    > event logs?
    >
    > --
    > --
    > Rob Moir
    > Website - http://www.robertmoir.co.uk
    > Virtual PC 2004 FAQ -
    > http://www.robertmoir.co.uk/win/VirtualPC2004FAQ.html
    > Kazaa - Software update services for your Viruses and Spyware.
    >
    >

    Rob,
    Thanks for your reply.
    Yes, I did a complete reinstall of WinXP SP2 and then installed Norton
    Antivirus. Then I ran all the updates from Microsoft. I would consider
    that a major change in the system.

    I am able to do a shutdown -a to stop the restart process. How do I check
    the log files to see which process was stopped?

    I've run the full system scan with Norton Internet Security 2005 with
    current updates and it comes up clean.

    Thanks again,
    Parley

  • Next message: Robert Moir: "Re: MBlast Symptoms - MBlast not found???"

    Relevant Pages

    • Re: XP patches update causing major performance problems
      ... download many updates which I suspect I had installed previously, ... updates for Offfice 2003 and several security updates for WinXP, msxml, etc ... Norton Internet Security installed. ... installs. ...
      (microsoft.public.windowsxp.general)
    • Re: trojan from wi- fi
      ... make regular backups. ... Does the Norton Internet Security offers enough protection for such? ... Learn to do image backups. ... Don't use Internet Exploder 6 for anything except Windoze Updates. ...
      (alt.internet.wireless)
    • RE: WIndows Update problems
      ... I'm using Norton Internet Security ... Click the "Norton Internet Security" tab ... May I add that I have never had to configure anything in Norton to download ... updates before; and as a matter of fact, ...
      (microsoft.public.windowsupdate)
    • Re: trojan from wi- fi
      ... with a trojan which I suspected to coming from a wifi connection he ... Does the Norton Internet Security offers enough protection for such? ... Organize your hard disk so that backups are easy. ... Don't use Internet Exploder 6 for anything except Windoze Updates. ...
      (alt.internet.wireless)
    • Re: LSA shell
      ... I connected to the Microsoft web site to get any updates for XP. ... Shortly afterward (and I think the Microsoft download is the cause of my ... But my system shutdown before I could click on the link about ...
      (microsoft.public.windowsxp.help_and_support)