Strange goings on in my HP

This morning I booted up and started to get my e-mail when the unit popped up a virus message that said the computer was infected and another window that stated that the unit would now be shutting down. It shut down and restarted as though nothing was awry.

The message was up for a short time and I wasn't able to find a pen and pencil in a timely enough manner to get the name of the virus. I was able to get part of the name of the infected file (winhl*.exe).

I then did a full system scan on my computer using Norton AV and it found ... nothing.

I then did a search on winhl*.* and it returned 32 hits. I then highlighted all of them and did a "Scan with Norton Antivirus" and it found ... nothing.

So wassup with this? Anyone got any ideas? Is there any way to retrieve the NAV alerts from a log file?

I did go to the Event Viewer but all it told me was:

APPLICATION:

Event Type: Error
Event Source: EventSystem
Event Category: (50)
Event ID: 4609
Date: 4/27/2004
Time: 7:28:19 AM
User: N/A
Computer: JIM_PEEL
Description:
The COM+ Event System detected a bad return code during its internal processing. HRESULT was 800706BA from line 44 of d:\nt\com\com1x\src\events\tier1\eventsystemobj.cpp. Please contact Microsoft Product Support Services to report this error.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

SYSTEM:

Event Type: Information
Event Source: USER32
Event Category: None
Event ID: 1074
Date: 4/27/2004
Time: 7:27:02 AM
User: NT AUTHORITY\SYSTEM
Computer: JIM_PEEL
Description:
The process winlogon.exe has initiated the restart of JIM_PEEL for the following reason: No title for this reason could be found
Minor Reason: 0xff
Shutdown Type: reboot
Comment: Windows must now restart because the Remote Procedure Call (RPC) service terminated unexpectedly
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: ff 00 00 00 ÿ...

AND

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 4/27/2004
Time: 7:27:02 AM
User: N/A
Computer: JIM_PEEL
Description:
The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

 

Virus Alert About the Blaster Worm and Its Variants

 

I find that the KB824146 patch has been attempting to install on my computer since September 11, 2003. It has failed to install every time which numbers, as of this date, 48 times.

I fail to find the files on the machine that Microsoft says should be there if I have the Blaster Worm. NAV fails to find anything on the unit as well.

I spent three hours on the help line with HP tonight and was unable to get the problem resolved. We did uncover a heretofore unknown anomaly involving Guidescope which I will post on a new thread.

I tried downloading the patch and doing a manual install but it still appears to be uninstalled. Is there any way that I can see a local list of the patches that are installed on my machine besides the MS installation history page?

 

Some of them are listed in Control Panel > Add/Remove, with uninstall directories under C:\Windows