Replies

Two people called me today to tell me that their computers were rebooting while they were connected to the internet. I checked on one customer and noticed that there were plenty of randomly named exe files in the \windows\system32 folder and one of them was called 'msblast.exe' - there was also a file called webdav.exe in the startup forder for AllUsers.

I archived & deleted all the suspicious new exe files in the system32 folder, put a dummy file in place of the webdav.exe file & applied the vulnerability patch from the Microsoft web site. So far the problem has not recurred. I see there are some virus updates to take care of the problem and I will download the latest update too. Maybe this has something to do with Amazon.com and Target.com being down recently.

Check your registry to for msblast as well (do a regedit). I found this on my wife's laptop last night. The "help" desk at her job is inept, to say the least.