Some users whose computers have been infected may not notice the presence of the worm at all, while others who are not infected may experience problems because the worm is attempting to attack their computer. Typical symptoms may include Windows XP and Windows Server 2003 systems rebooting every few minutes without user input, or Windows NT 4.0 and Windows 2000 systems becoming unresponsive.
Shutdown error: - If your computer is infected, you may see this error message.
Steps to Remove the System Shutdown Error
1.Download the Blaster Nachi Removal tool from the King's Sophos Anit-Virus Site. Follow the instructions on the site on how to download the Resolve Tool
2.Download the Appropriate Patch for your Computer. Select the Patch that was designed for your system. If you are not sure what version of windows you are running, click here.
|RPC/DCOM Patches KB824146|
|Windows 2000 ||Click Here|
|Windows Xp ||Click Here|
|Windows NT 4.0(Work Station) ||Click Here|
|Windows NT 4.0(Server) ||Click Here|
3.Disconnect your Computer from the internet or Network
4. Run the disinfection Tool to remove any Blaster Infections
5. After the diinfection tool completes, run the Patch.
6.After the patch installs your computer will need to be rebooted. Reattach your computer to the network.
At this point your computer should be clean and protected from further exploits of the RPC vulnerability.