Blaster virus shows its ugly head.....again

[grandchehaw]

A good friend of my family contacted me Saturday with a computer problem. After talking to him and listning to his description it sounded like he had the Blaster virus.

So I download the FixBlast util from SARC and head over to his house. While the util is running I found out he took his computer to Best Buy to have this problem fixed. Best Buy charged him $130 bucks to replace a stick of memory! WTF?!? As soon as he brought the computer back home and logged on the net he was booted.

After about 23 minutes the util finished but the virus wasn't found! So I tried to run the util in safe mode. The virus was still not found.

I log on to his ISP (which happens to be MSN 9) and sure enough I get the little popup that says your system will be rebooted. One time it took 5 minutes, the next time it took 5 seconds.

Any suggestions? The computer is a 1.5 year old HP running WinXP Home. Luckly the user doesn't have too many files. Mostly docments. He has a restore disk that he received with the PC. So if worst comes to worst I will just burn the files and nuke the box and call it solved.

[thekingofpain]

Is system restore off or on while running the utility?

[grandchehaw]

I believe I left it on. Is this a bad thing? I have managed to remove it before without turning that off.

[Scott Tiger]

No, you definitely need to turn off system restore (it'll delete all saved restores if you do) when you remove the virus.

[grandchehaw]

I see. <ponder> I believe I will be going into town tomorrow so I will stop by and give it another try. Thanks for the info.