Need help with MSblast.exe

[derrik]

I believe that I may have the msblast.exe worm.

I downloaded a fix from Symantec to load onto my computer, but now I cannot get it to even boot up successfully. After inputting the login password, it immediately (1-2 seconds) acts as if I've hit "shut down", saves my settings and shuts the computer off. This is even if I try to do so in safe mode.

Suggestions please!

Thanks,

Derrik

[Ried]

Hello derrick and welcome,

Open notepad and copy/paste the text in the quotebox below into it:

@shutdown -a

Save this as fix.bat Choose to "Save type as - All Files"
It should look like this:

Each time your machine threatens to shutdown, double click on fix.bat & it shall abort the shutdown procedure.

If you still have issues after running Symantec's tool, kindly follow the instructions in our sticky topic New Instructions - Read This Before Posting for Malware Removal Help and post the requested logs in your next reply.

[derrik]

Thank you TSF,

With my current issue, there is no opportunity to open notepad or to perform any action since within 1-2 seconds of logging in the system shuts down.

Any suggestions that could avoid this would be most helpful,

Derrik

[Ried]

Ok Derrik, boot as if you were going to Safe Mode, but instead of selecting Safe Mode, use the arrow key and select 'Last known good configuration'

If that worked, run the scans I linked you to in my previous post.

[derrik]

Hi,

I did try the last know good configuration option previously with the same response.

Any other ideas?

Derrik

[Ried]

Try booting into Safe Mode with command prompt.

Enter the command I gave you earlier. If you know the full path of the location of your Symantec tool, you can then enter that full path to run the tool.

If you do not know the full path, close the cmd window and open Task Manager>File>New Task (Run...) and browse to where you have the tool and click OK to run it.

Let me know how that went for you.

[derrik]

Thank you.

Just to clarify, when I hit F8 during the boot up process and choose SAFE MODE, it goes first to my password protected login page. After entering my user name and password, it immediately says the system is shutting down.

And so, even when choosing SAFE MODE, it does not allow me to boot up to load the desktop, but shuts down immediately.

In this scenario, am I still able to implement the suggestions that you just offered?

Thanks,
Derrik

[Ried]

This time I want you to select Safe Mode with Command Prompt. Try it and we'll see.

[derrik]

Thank for all the help.

The Safe Mode with Command Prompt yields the same result. It begins with a screen full of information, then begins to load XP, when goes to log in screen. After login is done, it goes through same loop of start up and immediate shut down.

Derrik

[Ried]

Hi Derrik,

I'm afraid all that's left to try is invoking a system restore point (if one is available) via the Recovery Console. Do you have the Windows XP install Disc? If so, set your bios to boot from CD. Insert the Install disc, then reboot.
Choose R for Recovery Console.

Follow the instructions here -->http://www.myfixes.com/articles/system

If no restore points are available, or any of the restore points you have result in the same shut down, be sure to see this link for Recovery Console instructions on how to backup your files from the c:\Documents and Settings folder and then reinstall the operating system.

[derrik]

Not that this will change much, but I told you wrong in my last post. It goes from the log in page to opening the desktop to returning back to the log in page in a loop.

[Ried]

You don't see a shutdown message when that happens? It just loops?

I still think your best bet at this point is to try to access your System Restore via the Recovery Console.