Need urgent help! My labtop infected with virus

[ytwumasi]

Hello all,

My labtop computer got infected yesterday with virus, and PCTOOLS cannot clean. The problem is anytime I turn my computer on, a message comes on saying I should save my data, and the system is turning off. It goes on to say "The system shut down was initiated by NT Authority/system". I can't run the PCTOOLS in the nomal mode. I ran in the safe mode but the problem is still there. I installed the windows xp patch
"windowsxp-kb824146-x86-enu" in the safe mode to clean the virus but did not remove after installation. I need urgent help as to how to remove this in the safe mode since my computer can only run less than one minute in the normal mode. I am using windows XP1 operating system, running PCTOOLS 5.0.

Thanks

[PC-Pete]

Hi
If it's SD5 you have and not PC Tools Antivirus don't feel too bad about posting in the wrong section. It seems everyone's doing it!

Now to the problem. This procedure is not comprehensive and is no real substitute hands-on attention but it may work.
It's likely you have a variant of the 'blaster' or 'lovsan' worm - http://www.f-secure.com/v-descs/msblast.shtml still has some info but vulnerability to this exploit was patched by MS years ago. If you really are still using XP SP1 then you're way out of date fixes for old Windows vulnerabilities. Read the whole page for extensive instructions - key ones summarised below.

To stop the shutting down, click Start > Run, and execute command 'shutdown -a'

If this is successful, press control.alt.delete, click Task Manager > Processes, and end msblast.exe if it is there.

Try downloading and running this ftp://ftp.f-secure.com/anti-virus/tools/f-lovsan.zip and/or another fix tool.

good luck
Pete :cool: