Re: XPsp2 install failure question

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Michael Solomon \(MS-MVP Windows Shell/User\) (user_at_#notme.com)
Date: 08/13/04 

Date: Fri, 13 Aug 2004 10:50:28 -0700

Yes, you had the blaster worm. There must have been a point at which you
were running but had no firewall and worm got through an open port. 

-- 
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/
<vaanoor@hotmail.com> wrote in message 
news:590101c4813b$e6efb820$a501280a@phx.gbl...
> Well, it DID install.... Coworker had downloaded SP2 and
> already run it on three machines here successfully.  I
> used it to upgrade my machine.  Once I was back to my
> desktop the problems began.  Across the taskbar I would
> get a series of USB icons filing by, within a minute they
> are gone (after one reboot I brought up my taskmanager and
> saw a series of rundll.exe go by -- then go away.
>
> After settling down, my device manager showed 4 unknown
> devices.  I am guessing they are the USB items which where
> not currently attached (Scanner, camera, RIO Chiba and
> memory card reader) so I figure those will solve
> themselves.
>
> My main problem is windows update or anything to do with
> the security window.  Whenever it comes up, I will get a
> crash in services.exe (not service.exe!) and a NT
> Authority shutdown in 60 seconds.  I do have a good virus
> scanner (updated too), I ran the newest version of Stinger
> just in case as well.  No viruses found.
>
> Long story short, I uninstalled SP2 and did a system
> restore back one day and am up and running fine now.  Any
> ideas what was causing services.exe to go berserk?

Relevant Pages

  • RE: blaster without dialogue
    ... initial problem and you have been able to use Windows Update to install the ... Security Patches, you should also take steps to remove the virus files. ... 833330 A tool is available to remove Blaster worm and Nachi worm infections ...
    (microsoft.public.security.virus)
  • Re: NT Authoritysystem shutdown
    ... enabling a firewall, you're very likely to get infected from any of ... What You Should Know About the Blaster Worm ... Bruce Chambers ... > Windows update - during the search for updates I get the ...
    (microsoft.public.windowsxp.security_admin)
  • svchost keeps running CPU at 100% when at Windows Update site, MB of usage jumps from 50 to 95 rando
    ... so does Windows Update (sometimes the little ... This is for Win XP SP2. ... I tried to get a hotfix for svchost, ... So the Blaster Worm has been reported to be inhabiting the Windows Update ...
    (microsoft.public.windowsupdate)
  • svchost keeps running CPU at 100% when at Windows Update site, MB of usage jumps from 50 to 95 rando
    ... so does Windows Update (sometimes the little ... This is for Win XP SP2. ... I tried to get a hotfix for svchost, ... So the Blaster Worm has been reported to be inhabiting the Windows Update ...
    (microsoft.public.windowsxp.general)
  • virus i need help
    ... Go to trend micro's website and run their house call ... scanner. ... microsoft has a lot of information on the blaster worm. ...
    (microsoft.public.security.virus)