comoputer help!!!!

[pikachamp]

computer shutting self down within minutes of startup, window pops uo saying something about something geting terminated, with a timer counting down from one minute

[pikachamp]

happening again
something about remote procedure call servies terminated unexpectantly

[HyToFry]

My friend brighton is having the same problem...

[pikachamp]

when i go to taskmanager, on the processes thing, there's a crap load of new nonsense things there in capital letters

[Macros]

sounds like a virus to me, try closing the new ones (if wont hurt your computer any more will it? i mean, its already spontaneously shutting down..........)
if that fails, try the trusty american bigger hammer method, and like start deleting stuff
dont actually do this, you might actually make your computer explode and kill you, and your dog, you'r cat will probably survive though

[Courk]

But will the cat use one if it's lives?

[pikachamp]

i t5hink i'm gonna have to reinstall
and my computer didn't come with a recovery disk

[Chuck]

I found this in another forum:

Originally posted by Nick:

---

Today there was a big problem over the internet, which some of you were probably involved in. If you got an error that said a Windows service had unexpectantly stopped running and your PC would shut down in 60 seconds, you were included in the many people who suffered the same fate. I hear that sending bad packets to a certain port would crash this program, so my guess is that is what someone is doing. This attack has already lasted hours at the time I'm writing this message, and continues. It has targeted many people I've talked to from all over the world.

If this happened to any of you, know that I don't think it's a virus or anything, just a broadcast. If you stay offline you never crash. But it IS extremely irritating and I hope it gets corrected soon.

--Nick

---

You don't need to reinstall Windows.

[Eykir]

It hit us pretty hard over here, although we both downloaded ZoneAlarm
www.zonealarm.com
and we've been protected ever since.

More information here thanks to Elayne. (who found it first)

[Death Mage]

I think I'm beginning to like my firewall.

[Samadhi]

What the hell is a comoputer?

[HyToFry]

It's fast type for computer. fast type is used when an error message says that your computer is about to shut down.

[Planky]

It's a worm spreading over the net called "W32.Blaster.Worm". I have already had to remove it twice from my system. You need an updated Virus Scanner to get rid of the worm, then you need to patch the vulnerable RPC to prevent it happening again.

http://support.microsoft.com/?kbid=823980

Even more info from symantec: http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

Funny that I got the worm just before I finished setting up my linux firewall.

[This message has been edited by Planky (edited 08-12-2003 03:44 AM).]

[Planky]

You gotta love this thou:

Originally posted by symantec:

---

The worm also attempts to perform a Denial of Service (DoS) on windowsupdate.com. This is an attempt to prevent you from applying a patch on your computer against the DCOM RPC vulnerability.

---

But it wont start doing it until after the 15th, so it will be interesting to see if the windowsupdate site can withstand it

[This message has been edited by Planky (edited 08-12-2003 03:51 AM).]

[MatthewV]

why is it that I have trouble getting problems like this? I am sure that you can guess...it starts with a M, ends in a C and has exactly one vowel.

[HyToFry]

Ah yes, I've heard of that. The simply three letter solution that keeps you from getting any virus to run on your computer... As I remember it also prevents you from getting a lot of software to run on your computer. Emulate this! *flips bird*

------------------
The truth is, you could slit my throat, and, with my one last gasping breath, I'd apologize for bleeding on your shirt.

[Samadhi]

Hmmm, I didn't get hit (prevention) and I actually have a useful computer (didn't buy a POS Mac).
Starts with L, ends with S. With exactly 'ick my ball' in the middle.

[One Skunk Todd]

If anybody needs, I have the 32 bit Windows patch saved on my computer and I can email it along with the Symantec (Norton) Blaster removal tool.

[This message has been edited by One Skunk Todd (edited 08-12-2003 01:36 PM).]

[HyToFry]

How about a link to that for my friend beerton? (upload to glpics.com if needed.)

[Vinny]

pika,

you can prevent the reboot by going to control panel -> services, look for the rpc service, right click and pull up the properties window, under the "recovery" tab, change all options from "reboot computer" to "restart service".

After that, run this patch on your machine.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp

[Vinny]

if you can't get your puter to stay long enough for the reboot, unplug your puter from the internet. If that doesn't work, boot up the computer in safe mode by hiting F8 during the window startup screen.

[pikachamp]

there's no sevice thing, this might be because i have xp

[jesternl]

You have XP.. go to start, programs, administrative tools, services, or, alternatively, start, run and type in servecis.msc at the line there and hit enter.

[Vinny]

that should be services.msc

[One Skunk Todd]

The link to the Symantec removal tool is:

http://securityresponse.symantec.com/avcenter/FixBlast.exe

This will start the download right away.

Hy, I don't have them at home and I don't have a glpics account. I think the links to MS and Symantec are sufficient but if you tell me how I can upload them to glpics tomorrow morning.

[jesternl]

you are of course right Vinny, I need to learn how to type

[Ancalagon]

Alternatively, as a temporary solution, you can block Port 135 with your firewall. (I just patched my xp.)

[HyToFry]

That's great OST. thanks.