This is a new worm which has just started to circulate today, W32.Blaster. By now, removal info should be available on the various antivirus websites. This worm takes advantage of a critical flaw in several versions of Windows. Microsoft released a fix to Windows Update about a month ago, and network admins have been scrambling the last two weeks to get that patch widely installed. David Gillett On 12 Aug 2003, at 7:06, Greg De Guzman wrote: > I'm troubleshooting a friend's computer that started behaving erratically > that shows a pop-up after about 5 minutes that says "windows is shutting > down due to a ____ terminated process". The pop-up starts a timer within > itself after which the system re-starts. This process repeats itself > ad-infinitum everytime the computer re-starts. > > I thought of peeking through the start-up list and see what the system was > loading and looked for unfamiliar programs. One entry caught my attention, > and it is "msblast.exe". I did a search from the computer's Start Menu for > the "msblast.exe* and it found the ff: > > c:\Windows\System32\msblast.exe > > c:\windows\Prefetch\MSBLASTEXE-09FF84F2.pf > > Deactivating the "msblast.exe" from the Start-up List stopped the process. > > What are these files? Are these Virus Payloads? Nothing was detected through > the Norton AV installed with a Virus Definition dated 6/27/03 after > repeating the Scan. > > Thanks for any inputs. > > > Greg > > PCSOFT maintains many useful files for download > visit our download web page at: > http://freepctech.com/downloads.shtml Curious about the people moderating your messages? Visit our staff web site: http://freepctech.com/staff.shtml