Warning: Windows XP
 

Well, on top of all the existing computer problems I have been having, apparently a new virus has just been unleased on Windows XP. This new virus runs through your internet connection and takes advantage of a defect in XP to completely overrun your computer. When you log on to your system, you will get four messages concerning missing files and then an error box that says your computer will be shutting down in 60 seconds due to a problem with the "remote procedure call" (RPC). So, if you have Windows XP, make sure you are not connected to the internet and, if you already are, call your computer company and ask how to get it fixed. You'll likely have to send it in to be patched up.

Ugh, thank god for a secondary computer because (minimum) two weeks without computer access would kill me!

well that explains the trouble with my computer then
:( will the recovery kit that comes with the computer take care of the problem?? does anyone know??

The recovery kit *may* temporarily fix the problem, but it's doubtful. Also, the XP glitch will still be there so you'll still be suceptible to viruses and other problems in the future.

I don't know of any current problem that cannot be prevented by taking some easy steps

• Go to http://windowsupdate.microsoft.com and download all the security updates
• Go to www.zonelabs.com and download the free version of the ZoneAlarm firewall
• Go to www.norton.com and purchase Norton Antivirus and update the definitions every week

As well, there is no reason why you would have to send your computer in for a patch to overcome a virus: Any such patch will deal with the software within the computer, which can easily be installed by you through downloading it through the internet - any such patches (and there are many) are available at http://windowsupdate.microsoft.com

The only reason you MIGHT have to send in your computer is if you have already been effected by a virus and need a new motherboard, etc.

I was getting the same thing, my computer got shut down at least 5 times that day. I ran the windows update (you can have it scan for critical updates), and I don't have that problem anymore.

Heeeeeey...sounds like the virus that affected all the University of Hawaii computers with XP today! Grr...

This is the release from the UH ITS department with instructions on how to fix it:

There are reports from people on campus that they cannot use Windows Update, their computer is shutting down on its own, or they are unable to update or use their antivirus software. These are symptoms of the W32/Lovsan or Blaster worm. The worm spreads through insecure shared folders (the worm uses port 135 TCP). This worm is using a Microsoft vulnerability called DCOM RPC from the security bulletin http://www.microsoft.com/technet/tre.../MS03-026.asp. It is very important that you install this patch installed immediately and update your antivirus software to the most current version 4283 dated August 6th. There is a special Extra DAT file for McAfee VirusScan extrablaster.exe*** to help you detect and clean this worm.
More information will be posted when available.

I got that today too...and I NEVER EVER get viruses, because I'm meticulous about who even gets my email address.

Ran the windows XP patch and deleted all the files that the virus left on the PC and it was over.

OMG! My computer keeps doing that...and it's annoying the HELL outta me...like it gets that box and then it like counts down and it says I'll lose all unsaved work. And then it restarts. It especially does it at night.

NO WONDER!!!!!!!!!!!!!!:mad:

Re: Warning: Windows XP
 

A few days ago, I had a similar problem with the RPC and didn't know what it was at first. I recently ran a virus scan through Norton and things were okay.

http://smilies.crowd9.com/cwm/cwm/eek5.gif

Okay yall, I'm having a problem figuring out what to download on that link OTW posted. Should I just download a virus scanner or do I need a patch?

Hey Hootie, that was the stuff we dl-ed at work to fix our computers at work. It'd be best to download the patch because it sounds like your PC does it too:

http://us.mcafee.com/virusInfo/defau...virus_k=100547

That's the link to the McAfee version and it gives better directions to dl it.

When you restart your computer, CTRL + ALT + DEL and kill the MSBLAST.exe so it doesn't give you that countdown. Doing that will give you enough time to download the patch.

OMG!!! That happened to me today. My brother and I couldn't figure out what was wrong with the computer. He reinstalled windows and that did't work. He got frustrated and called our internet provider and that told us what the problem was...this crazy a$$ virus, and my brother was told to download a program from the microsoft website for added protection (ok that just sounded like my computer needed a condom).

Anyhoo, we fixed the problem...I hope. It seems to working now, but it's just not the same as it was before.

Well, I guess all my other computer problems are the reason the virus scan and the patch wouldn't work for me, but I'm glad the problem is easily fixed for some of you.

Ack! I just posted my problem in the Random thread. It had me so frustrated last night!

So, I called Dell & they gave me the address to DL the patch from the Microsoft website. Will that take care of everything? I noticed someone saying that they deleted all files that the virus left.....will the patch make me aware of those files? If not, what would they be?

(I hate having computer problems!! :mad: )

This happened to me last night. I called the Tech people at my ISP and they walked me through the instructions to download the patch.

Damn computer nerds!:rolleyes:

HEY!!! I resemble that remark! :p

Ack! I'll have to double-check my computer when I get home tonight. I'm pretty meticulous about always downloading the latest virus and Windows updates, so maybe it's ok. We'll see, I guess...

I downloaded all of the critical updates and put a firewall on my computer and it's working fine now.

I love you all! My computer has been doing this exact same thing for the past couple days, and it's so annoying I wanted to take the entire machine and pitch it out the window. Seriously. You all just saved me lots o' money (and probably the wrath of my parents ;) )!

so i just managed to stay online long enough to download the patch for this whole virus thing. NOT MY IDEA OF FUN. it took me almost 2 hours to fix the computer becuase it kept noticing i was trying to fix it and it would shut itself down. WHY CAN'T MY BORTHERS EVER THINK ABOUT ACTUALLY INSTALLING ANTIVIRUS SOFTWARE AND KEEPING IT UPDATED!!

by the way i called a computer fix it place today. everyone should probably downlaod the patch for it. you can find it by gong to www.norton.com and typing LovSan (the name of the virus) in the search feature. the virus disables your antivirus software so that even if you think you don't have the virus you might have it. it's not fun to deal with.

If you go to www.microsoft.com and download the critical security updates, that should help. I also downloaded Zone Alarm from www.zdnet.com.
That's what worked for me!

omg that is so incredibly annoying!

mine started last week, and then for a week it didn't do a thing. i called Dell and they told me that i'd have to delete everything dled from the comp (including kazaa :mad: ) and then go to Run and delete the virus wherever it popped up.

of course i thought it was fixed but NO! yesterday like everytime i opened up anything w/ Microsoft, (i thought....but i guess it was thru the internet other than AOL) it kept shutting off!

this really sucks. i thought my comp was alone :( sorry you all are dealing with this too!

Is this just for Windows XP or is it affecting the other operating systems as well?

I have Windows 98 (my computer is OLD) and it has been acting funny lately. My internet has been really slow and other weird things have been happening.

But, I have Norton on my computer and it always updates itself against viruses. I also have a BlackIce Firewall installed and a physical firewall with my internet hub.

Could it be the virus or is my computer just a POS?

ZTAngel, I believe *this* particular virus only affects Windows XP Operating Systems.

I downloaded the patch and updated my Norton Anti-Virus, so I'm thinking my comp is ok. It hasn't been acting funny, so I think it's good. I couldn't turn on the firewall for some reason, though. I think AOL messes up the settings. So, I'm just going to go with what I have and hope for the best.

From an article on CNN.com:

Same boat here! Actually, I tried for several hours yesterday to download the *$&#^%*#! patch, but the @*#*%&$ worm "knew" what I was trying to do so it kept shutting down. I screamed, I cursed, I raved about how I hoped they would catch the a$$hole who created this thing and hang him from the nearest tree with his own computer cord. My mom had to download the patch at work today and save it to a disk so she could bring it home and so far it's OK, but I'm still paranoid.

Did anyone get the Blaster Worm? I got it on my computer at work today and it took IT all day to fix it. They said that it only infects Windows 2000. Luckily they were able to save all my files, but I got no work done today.

I guess ya can call me old fashion!:D

Still got Windows 98!:cool:

Yea Me!!!!!!!!!!!!!!!:p

i got the worm. my friend came over and got rid of it last night. what a great way to celebrate a birthday tho.
"congrats... your computer has a virus."
:rolleyes:

I also got the virus last night. Luckily, my computer pro boyfriend was able to fix it. So my GC withdrawl was not that bad. Now, I have a firewall, virus scan, the whole nine.

grrr....the computer technician told me to disable my firewall while we wer trying to figure out why i couldn't get internet access and i got the d#@$ virus again. at least i still had the stuff to get rid of it so it's gone again now. why didn't that patch work for me?

Just for information:

There is a free antivirus program called AVG

Free anti-spyware program:
SpyBot Search & Destroy

I patched up my computer as soon as I read about the worm on Yahoo's Headline News.

If you suspect (or already know) you've been infected by this particular virus, here's a way to disable it while you get the patch to fix it:

If you're using Windows 95 or 98 go to Start -> Run and in the Run box type MSCONFIG. (Seems to have not hit Win 95 or 98 computers, but better safe than sorry! Win ME and XP have something similar, but whether it's still MSCONFIG I'm not sure.)

The System Configuration box will come up. Click on the Startup tab and scroll down the programs that will activate on startup.

The incriminating file is called MSBLAST.EXE. Uncheck that program from the Startup list, click OK or Apply, then close the System Configuration utility.

You will be prompted to reboot your system. Do so.

This should keep the malicious program temporarily at bay until you can download and apply the appropriate security patches.

Damn! It feels good to have a Mac (or a computer that's too old for anything but Windows 98). :p

Could this be the worm?
 

I was on the internet yesterday when all of a sudden the screen went completely white. There was a box that said in so many words "System shutting down, save any unsaved work, initiated by NT Authority\System, Windows must restart because remote procedure call service terminated unexpectedly."

There was a 60 second timer so I waited until it ran out of time. Then it swithced to another screen that said that I was infected with the blaster worm and to get rid of it I can download something to get rid of it. But below the download button there was a visa, mastercard, etc sign basically saying that I had to pay for the download. My computer never restarted by itself. I downloaded the patch, enabled a firewall, and have an anti-virus program before all of this happened.

My question is for the people who infected. What exactly happened when you found out you had the virus?

It seems to me that it was a pop up ad, but I just want to be 100% sure. But unlike other ads, there was not x so I could close the box. I had to crl-alt-del and then press end task to close that window and I went back to the page I was on before the white screen popped up.

Ok so you know whats funny I have this damned worm and its hit my other computer HARD! and Im talking really hard like I cant even get to the desktop to mess with it. I cant start it in safe mode I cant even reinstall my XP cd the computer like doesnt reconize its in the drive. SO basically Im totally screwed!! lol hopefully I can find some kind of computer genius to fix it for me but otherwise im going to have to like toss my beloved baby! :(


Nichole

DSTDiva it sounds as if you may have it [the virus]. Anti-virus packages need updating every so often so quite possibly yours may not recognise this latest infection. I didn't like the sound of that credit card thing, kinda like "you'll be okay so long as you give us your lunch money". :p

Nichole, touch melodramatic to toss the computer because it has one rogue program (virus) on it! Kinda like buying a new car after running out of petrol/getting a flat. Incidentally, your description of the problem suggests you definitely have the virus. :)

I'll suggest a coupla things to get rid of it:

1) Activate the built in Windows XP Firewall FIRST.
How to Enable Internet Connection Firewall (ICF) on Windows XP

• On the taskbar at the bottom of your screen, click Start, and then click Control Panel.
• Click the Network and Internet Connections category.
  (If the Network and Internet Connections is not visible, click Switch to Category View under Control Panel on the left side of the Control Panel window.)
• Click Network Connections.
• Right-click the Dial-up, LAN, or High-Speed Internet connection that you use to connect to the Internet, and then click Properties from the context menu.
• On the Advanced tab, under Internet Connection Firewall, select Protect my computer or network, and then click OK.
  The Windows XP firewall is now enabled.

2) Next you wanna disable System Restore. This is a nifty (well in Microsoft's opinion) part of Windows XP that backs up selected files automatically to the C:\_Restore folder. In case of a problem which will let you restore them. What it means here though is an infected file could be stored there as a backup file, and the anti-virus program will be unable to delete those files. So....You must disable the System Restore Utility first so any anti-virus program can remove infected files from the C:\_Restore folder along with from everywhere else.

2.5) Disabling System Restore: 1. Right click the My Computer icon on the Desktop and click on Properties. 2. Click on the System Restore tab. 3. Put a check mark next to 'Turn off System Restore on All Drives'. 4. Click the 'OK' button. 5. You will be prompted to restart the computer. Click Yes.
(Note: To re-enable the Restore Utility AFTER you've got rid of the virus), follow steps one to five and on step three remove the check mark next to 'Turn off System Restore on All Drives'.

http://vil.nai.com/vil/SystemHelpDoc...sysRestore.gif

If it's still trying to reboot you after 60 seconds of gettings into Windows XP after booting, Press CTRL-ALT-DEL, click on the Processes tab and terminate the process msblast.exe

3) Install the Microsoft Patch: http://www.microsoft.com/downloads/d...displaylang=en

4) So you're restarted, no system restore activated, patched now to get rid of the unwelcome guest. Well normally you'll have a nice updated anti-virus package, erm instead of that use this:
http://securityresponse.symantec.com...r/FixBlast.exe
That file is essentially an anti-virus package which just works on that virus.

Should it not work, then try http://download.nai.com/products/mca...rt/stinger.exe . It's an emergency tool from Symantec created when they need to respond to new viruses in between full updates of their software. So uhm, download ... install, run. Should fix it?

5) If that's fixed it, go to http://windowsupdate.microsoft.com and download the regular XP updates if you haven't already.

6) Come back to us in the thread if it hasn't fixed it.