Options

Help, computer keeps rebooting

ChadaeChadae Member Posts: 65 ■■□□□□□□□□
I dont understand why my computer keeps re-booting every time. Today it rebooted about 5 times. Could this be the blaster worm? Im not sure that it is.. help anyone icon_confused.gif

Comments

  • Options
    GhentGhent Member Posts: 310
    Sounds like the symptoms of the worm. Go to Symantec.com and they've got a patch and some info on the virus. If that fixes it, then it was the worm.
    Prais'd be the fathomless universe, for life and joy, and for objects and knowledge curious.' Whalt Whitman
  • Options
    GhentGhent Member Posts: 310
    If your not sure if you've got it or not, here's how to check for the latest version of the virus, check HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    for this value "windows automation"="mslaugh.exe". If you've got that, then you've got it.
    Prais'd be the fathomless universe, for life and joy, and for objects and knowledge curious.' Whalt Whitman
  • Options
    ChadaeChadae Member Posts: 65 ■■□□□□□□□□
    Ghent: How do I get there? Is this unders the windows folder? Sorry I am not so good with Operating systems yet...
  • Options
    jrowejrowe Member Posts: 83 ■■□□□□□□□□
    if your not to good with windows i wouldn't recommend playing with the registry.

    just download the worm removal tool from the following link and run it.
    it will tell you if you have the worm and remove it for you.

    http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
  • Options
    GhentGhent Member Posts: 310
    Here's the complete instructions.

    Click Start, and then click Run. (The Run dialog box appears.)
    Type regedit

    Then click OK. (The Registry Editor opens.)


    Navigate to the key:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run


    In the right pane, delete the value:

    "windows automation"="mslaugh.exe"


    Exit the Registry Editor

    For more info check out http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.e.worm.html
    Prais'd be the fathomless universe, for life and joy, and for objects and knowledge curious.' Whalt Whitman
  • Options
    WebmasterWebmaster Admin Posts: 10,292 Admin
    And if all the above doesn't help:

    icon_arrow.gifwww.microsoft.com/security/incident/blast.asp

    I agree with jrowe that editing the registry is not recommended for thos that are not "so good with Operating systems yet". Surely it seems easy for someone who has done it before, but it is at least as easy to mess things up.

    I know this is not an exam related questions, but just to illustrate: in the past (and perhaps still, it's been a while since I took MS exams) there were exam questions in MS exams that gave two seemingly correct answers, one was configuring something using a Control Panel applet, the other did the exact same thing by editing the registry... you can guess which one of the correct answers was the correct answer.
  • Options
    bellboybellboy Member Posts: 1,017
    http://www.avast.com/i_idt_171.html will get you a free removal tool for ten worms (including blaster).
    A+ Moderator
  • Options
    ChadaeChadae Member Posts: 65 ■■□□□□□□□□
    Thanks for all the help everyone!! I went to the avast.com site and my computer doesn't have any known worms. A microsoft reporting error did show up advising me that it was a device driver error. So I'm running a windows update to see if it remedies the problem. Thanks again--I will update if it works.
  • Options
    bellboybellboy Member Posts: 1,017
    if your computer is running xp (or windows 2000 or nt for that matter), i would suggest visiting the microsoft website and downloading the blaster patch nayway. you may not have it now, but who knows what might happen in the future ;)
    A+ Moderator
  • Options
    ChadaeChadae Member Posts: 65 ■■□□□□□□□□
    Well, I downloaded all the windows update that I needed and the problem is no longer happening. I am also going to get that patch (better safe than sorry) as bellboy suggested. Thanks again everyone.
Sign In or Register to comment.