Before continuing, Please print out these instructions! Obtaining the Windows XP patch and MSBlaster & Welchia/Nachi Worm Removal Tools If you are getting a window stating your computer is shutting down after a certain amount of time (such as the one above) then perform the following steps. If you are not getting this window, then you may skip this portion and proceed to the section: Downloading the Patch for Windows XP, and continue from there. Locate and right-click on the My Computer icon (This icon will usually be on the Desktop or in the Start menu.) Click on Manage. Double-click on Services and Applications Double-click on the Services icon. You should now be in the Services window. Locate and double-click Remote Procedure Call (RPC). There are two similar items. Make sure the one you choose has nothing written after ‘(RPC)’. Click on the Recovery tab. On First, Second and Subsequent failures, from the pull-down bar choose Take no action for each of them. Click OK. Close all windows until you are back to the desktop. Restart your computer. Downloading the Patch for Windows XP Go to this address to obtain the patch: http://www.microsoft.com/downloads/details.aspx?FamilyID=2354406c-c5b6-44ac-9532-3de40f69c074&displaylang=en Click on Save and tell it to save it on your desktop. Then run it and allow it to update Windows. This process will take a few minutes. Now, follow these instructions to disable the System Restore: Disabling the System Restore Utility (Windows XP Users) a. Right click the My Computer icon on the Desktop and click on Properties. b. Click on the System Restore tab. c. Put a check mark next to 'Turn off System Restore'. d. Click the 'OK' button. You will be prompted to restart the computer. Click Yes. CAUTION: If you are running Windows XP, we strongly recommend that you do not skip this step. The removal procedure may be unsuccessful if Windows XP System Restore is not disabled, because Windows prevents outside programs from modifying System Restore. At this point you may retrieve the following worm removal tools: MsBlaster worm removal tool: http://securityresponse.symantec.com/avcenter/FixBlast.exe Save the FixBlast.exe file to your desktop, and then run it. Welchia worm removal tool: http://www.symantec.com/avcenter/FixWelch.exe Save the FixWelch.exe file to your desktop, and then run it, also. Once completed, restart the computer. Run both removal tools again to ensure that the system is clean. Re-enable System Restore as shown above on steps a thru d, but this time remove the check mark to do so. Restart your computer. Congratulations, you’re done! At this point you should be free of these worms and no longer vulnerable to them.