RE: Blaster Worm Problem

From: Jonathan V Hays (jhays@jtan.com)
Date: Tue Sep 02 2003 - 12:02:23 GMT-3


Hey people - this is NOT a Microsoft support mailing list.

Thanks for staying on topic - the Cisco CCIE Routing and Switching exam.

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Mike
Sent: Tuesday, September 02, 2003 10:12 AM
To: ccielab@groupstudy.com
Subject: Re: Blaster Worm Problem

Have you checked the Event Logs to see if there are any warning/stop
errors
at the time period of the restart? If you have not, check those and
search
Microsoft's TechNet site (http://support.microsoft.com) for assistance
in
dealing with the errors (you will want to look through all three logs
and
find the FIRST error message and start your search from their).
Personally,
I find Google is an excellent tool for searching for Event ID messages
on
Microsoft's site. Enter your query as "Event ID # site:microsoft.com"
and
see if that helps.

BTW - Placing "CCIE Written" in your certification listing portion of
your
signature is a violation of the Certifications Agreement that you signed
with Cisco, as it is not a valid Certification per Cisco.

HTH

Mike

----- Original Message -----
From: "Tiffany Creighton" <Tiffany.Creighton@vitalsite.com>
To: <ccielab@groupstudy.com>
Sent: Tuesday, September 02, 2003 10:01 AM
Subject: Blaster Worm Problem

> I know someone who was infected with the Blaster worm. I removed the
> worm from his computer and updated his Windows 2000 operating system
> with all of the latest patches and updates from Microsoft.
> Unfortunately, his computer will still restart itself unexpectedly.
The
> worm is no longer there. What could be causing the restarting?
>
>
>
> Thank you,
>
>
>
> Tiffany Creighton
>
> CCIE Written,CCDP, CCNP, CCDA, CCNA, CNA
>
> Vital Support Systems
>
> Systems Engineer
>
> 515.334.5737 Direct
>
> 515.334.5757 Fax
>
> 515.710.5456 Mobile
>
> [GroupStudy removed an attachment of type image/gif which had a name
of
image001.gif]
>
>
>



This archive was generated by hypermail 2.1.4 : Wed Oct 01 2003 - 07:24:21 GMT-3