Hello, I'm troubleshooting a Win 2000k Professional Computer that's just beginning to exhibit several symptoms. The machine was checked and verified it is not infected with the W32.Blaster.Worm. Also, the latest Security Patch to prevent the virus was applied. The problems began before the Patch was applied. Also, i'm logged in as Administrator-full rights. Problems: 1) I cannot install Norton AntiVirus Corporate Edition 8.0. When attempting to install from a Desktop installer, or from Zip Disk, i get an error "25002". I found relative documentation on Symantec's site regarding possible causes of the error, and investigated everything short of getting into the registry. The machine already has NAVCE 7.5 installed, which brings up problem number two. 2) I cannot remove Norton Antivirus Corporate Edition 7.5 using Add/Remove. When I try, i get a ununinstall dialog, without any progress bar. The dialog dimisses and there is no confirmation the removable took place. I was able to uninstall on another 2000 machine and did not experience the problem. 3) Incorrect programs open when clicking on another apps Icon. For instance, clicking on the Real Player Icon does not open Real Player, but another Application. This occurs with several other apps. I had to reinstall most of the internet media utilities and now they work. 4) At one point, the machine would not Shut Down via the Start/Shut Down menu. I had to power-off the machine. What I tried: 1) Booted into Safe Mode and tried Add/Remove. Got a message saying it could not find the uninstall registry, and i need to install it? 2) Ran Norton Disk Doctor, but it did not report any problems. So what's is sound like is going on here? Thanks in advance, iJeff

I have exactly the same symptoms. I have reinstalled Windows 2000 Prof and after the Pc reach internet the problem start again. Please help!!! I think it is some virus but I can't find out which one

You guys are infected with the Blaster/RPC virus. If you are running windows 2000 or XP you need atleast sp2 or higher plus the patch. http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp Will get you the patch for DCOM/RPC.. I would reinstall everything Turn off your Server, COmputer Browsing, and Messanger Services. And do everything from cd best as you can before plugging into the internet.

TSG_Technician, Thanks for your input. While I’m leaning towards a strong possibility that this is virus related, this is regarding someone else’s machine I’m working on. So I’ve been operating under what they’ve been telling me. That said. Some questions regarding you suggestion before I ‘jump’ into reinstalling everything. There are obviously some variants now to the worm32.blaster.worm (a.b.c) you refer to. There are also several free tools and tips mentioned to confirm the existence of the virus. I will rescan the computer again using every method known because I’ve been reading about instances where one utility cannot find the ‘worm’. If you offer a reasonable reason why that would be a waste of time, I would appreciate it. I would consider your reinstall suggestion seriously. I’m also curios if the Terminating method will show that "msblast.exe," or "blast.exe” is running. While I’m somewhat comforted by csonders reply post, there’s a lot of room for interpretation there too. On one hand perhaps I was specific enough in my post that his saying “I have exactly the same symptoms” is good enough. However it’s been my experience there are usually differences along the say which separate the issues. You also suggest to turn off the server. This machine is running Windows 2000 Professional, not Server. I had thought those were two similar, but different Operating Systems. Or are you saying turn off any server feature within 2000 that might be on? Again, thanks for your input. We’ll see if some more thoughts bout this issue are posted in addition to ours. iJeff