Solution for Rebooting Problem (Worm)

This has been posted at various places but may as well post it here since there appear to be multiple threads with people having this problem. If you are getting the restarting after 60 seconds when connected to the Internet, here's how to stop the problem (without a firewall):

1. Go to TASK MANAGER, click on the PROCESSES tab, and find MSBLAST.EXE under the Image Name column. Highlight it and click END PROCESS.

2. Open Windows Explorer and browse to C:\WINDOWS\system32, (where C: is the HD with WinXP). Under that directory locate MSBLAST.EXE and delete it.

3.Go to Start, click run, and type in REGEDIT to open the Registry Editor. Once there, find the following key:


There you will see a value named "windows auto update" ... right-click it and delete it.

The worm should be completely gone now... this is what I did on my home PC's and both have been fine for several hours.
You should still install the patch from MS in addition to doing this, of course. Downloading a firewall if you don't already have one wouldn't hurt either ;)
4 answers Last reply
More about solution rebooting problem worm
  1. Are you talking about this error message...

    Remote procedure call service terminated unexpectedly
    this shut down was authorized by NT authority system

    because yesterday afternoon i got this message a bunch of times, i managed to get all the updates from ms and it stopped. Since the updates were installed i havent had this message once and its been more than a day. Should I still go through what you described above? or just leave it alone?
  2. Yep, that's exactly the message I (and apparently about 50 million others) have seen. Following those steps and downloading the patch will get rid of the problem.
  3. thanks i already did it. I am wondering if I installed the patch though, because i just did a scan for updates and installed all the critical and recommended ones. After i read your post and went through deleting the msblast in all the areas, i ran the windows update again and it couldnt find any other updates for me so i am assuming i have it.
  4. The patch isn't available on Windows Update. It's here:

    <A HREF="" target="_new">Blaster Worm: Critical Security Patch for Windows XP</A>


    <A HREF="" target="_new"><font color=green>My System Rigs</font color=green></A>

    <A HREF="" target="_new"><b><font color=purple></font color=purple></b></A> - <i><font color=orange>Your Computer Questions Answered</font color=orange></i>
Ask a new question

Read More

Windows XP