I know this is an old thread but does anyone one know if there is a new variant of the MSblaster worm. I ask because I thought I had fixed this problem 5 months ago by installing the patch from Microsoft site and running the removal tool from Symantec. This week it has reared its ugly head again on the same machine, so I loaded the latest patch for it from the MS site and also ran the removal tool from the MS site. Thinking this was the last of it I went online and after about an hour or so, would you believe it the "NT Authority" box appeared and the machine proceeded to close down. I have also seen this happen on another machine that had had the patch installed a few months ago, What's going on here???