got the ms blaster worm but can't remove this time..

[Ryan3dFan]

so i reformatted my HD and forgot all about the vulnerabilities i had protected myself against before i reformatted. I didn't install norton right away because i don't have the disk with me at college but my friend just now lent it to me. but here is my problem, i have downloaded the fix and the patch. the fix cannot find the blaster worm but when i try to run the patch or norton or msconfig and several other things they get shut down immediately. there is something in the processes called bot.exe running and i cannot get rid of it. i don't know what it is or how to search for it and get rid of it. is this another virus too? or is it associated with the blaster worm? thanks

[M_A_D]

Try to run the Online Virus Scan you can find here.

And if you can't go there because windows is shutting down (because of the RPC-Service, there should be a window telling you your system is being shut down in 30 seconds) do the following:
[list=1][*]start->run->services.msc[*]Find the RPC Service, right click it and select properties.[*]on the third tab change the failure actions to 'restart service'[/list=1]

But make sure to revert those settings afterwards.

[highpingdrifter]

i had problems recently, similar situation and i tried the norton online scan and panda software they did not find anything so i tried trend micro's on line scan which then found 2 worms so i would suggest trying trend first and another way to stop the computer being shutdown until you are updated is start/run shutdown /a (saves changing services)

links:
http://housecall.trendmicro.com/

http://security.symantec.com/

http://www.pandasoftware.com/actives..._principal.htm

http://www.pcpitstop.com/antivirus/default.asp

[Nocain]

ok if your computer is infected with the msblast worm it will pop up a box that will say you have 60 then it will shutdown the machine to get around this just make sure you have a command prompt window then type in "shutdown -a" without the quotes that will cancle the shutdown, then go here http://securityresponse.symantec.com...ools.list.html and download the removal tool, then reboot the machine making sure that it cannot connect to the internet, once in windows run the removal tool, it will take awhile but it should remove it.

here is a direct link to the removal tool.
http://securityresponse.symantec.com...r/FixBlast.exe

[Fleabus]

Blaster Fix http://www3.telus.net/dandemar/blaster.htm