system shutdown problem. window popup 1 min till shutdown

[Guest]

Hello. I am having trouble with my computer. when I am online I often have a window pop up which states that the system will shut down and the it counts down 1 minute till shut down it says it is a remote procedure call. anyone know how to fix this??

 

[Arjun]

Hi there jnhx,

You got blaster worm virus!

Remove W32.MSBlast.Worm, download patch from here:
http://www.kellys-korner-xp.com/regs_edits/msblast.vbs

NOTE: If your anti-virus software warns you of a "malicious" script, this
is normal if you have "Script Safe" or similar technology enabled. These
scripts are not malicious, but they do make changes to the System Registry.

Blaster Worm: Critical Security Patch for Windows XP (32-bit version)
http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532
-3DE40F69C074&displaylang=en

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

PS: Apply the MS patch only after applying the Kelly patch to remove the
virus

"What You Should Know About the Blaster Worm and Its Variants"
http://www.microsoft.com/security/incident/blast.asp

HTH
Arjun

Hello. I am having trouble with my computer. when I am online I often have

a window pop up which states that the system will shut down and the it
counts down 1 minute till shut down it says it is a remote procedure call.
anyone know how to fix this??

 

[Guest]

That is the wormblaster virus, you need to remove the virus and download the security update, both of which can be found on the MS Downloads website.

 

[Bruce Chambers]

Greetings --

If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH