MSBlast and Windows 2000

[Zaphod666]

I'm trying to fix a friend's W2K Pro box, that succumbed to MSBlast. I've done all of these:

F-Secure Lovesan
AVG
Symantec FixBlast
Stinger
Windows2000-KB823980-x86-ENU.exe for MS03-26 patch
KB833330-ENU.exe
W2K SP1.

The worm has apparently gone, as the killers say it's no longer to be found, but still I have the remnants of the damn thing: No add/remove programs, Network connections box is empty, can't get most properties pages up, no copy/paste, no drag 'n drop, IE links not working, Excel says 'Cannot use object linking and embedding'. Oh, and it takes ages to boot up; I don't know if this is just down to the lack of a network at the moment. I don't want to connect it to a network or the Internet until it's back to normal.

I've followed suggestions about running the patches, boot to safe mode and run the Blaster killers, then reboot normally, but to no avail. I haven't been able to reinstall IE6 as yet (this was another suggestion online). My next step would be to reinstall W2K, but I don't have the disc ATM.

Please will someone tell me it's a simple (!) registry change or the matter of replacing a bad dll or something?

 

[bcastner]

Open a new notepad session, to be called IE_fix.cmd, and copy/paste the below:

regsvr32 urlmon.dll
regsvr32 Shdocvw.dll
regsvr32 Msjava.dll
regsvr32 Actxprxy.dll
regsvr32 Oleaut32.dll
regsvr32 Mshtml.dll
regsvr32 Browseui.dll
regsvr32 Shell32.dll

Save the file, then double click IE_fix.cmd and answer the prompts. Ignore any error messages.

Reboot and test again.

 

[Zaphod666]

Sorry, forgot to mention that was another thing I'd already tried Any other thoughts (besides zapping it all and starting again, which wouldn't tell me what the problem was)?

 

[1101001100110101]

Are you sure you dont have any other viruses on your pc? try running stinger and see if you come back clean. Here is the link

http://vil.nai.com/vil/stinger/

 

[snapicus]

Is the RPC service currently running?

 

[Zaphod666]

OK, sorry for the late reply. I eventually reformatted it and started again. That got it! Thanks for all your help.