60 seconds

[Stephen]

i can only use my internet for about 5 mins, then a
window pops up and says a particular system process was
stopped. it gives a 60 second warning and then completly
shuts down the computer.
I recently found W32.BlasterWorm on my hard drive, would
this be an effect of it?

 

[Frank Saunders, MS-MVP IE/OE]

i can only use my internet for about 5 mins, then a
window pops up and says a particular system process was
stopped. it gives a 60 second warning and then completly
shuts down the computer.
I recently found W32.BlasterWorm on my hard drive, would
this be an effect of it?

Yes.
The first and last links are to copies of scripts that will disinfect your
machine, the last one being zipped.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Information:
http://www.kellys-korner-xp.com/regs_edits/msblast.vbs
http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://forum.mvps.org/viewtopic.php?t=2703
Microsoft Security Bulletin MS03-026:
http://www.microsoft.com/technet/security/bulletin/MS03-026.asp?frame=true
MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=823980
Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability
http://securityresponse.symantec.com/avcenter/security/Content/8205.htm
To clean it up:
http://www.bigblackglasses.com/Article.aspx?Article=342
or a zipped script:
http://www.bigblackglasses.com/staff/downloads/msblast2.zip

--
Frank Saunders, MS-MVP IE/OE
http://www.fjsmjs.com
Reply to Newsgroup. I won't answer email
Protect Your PC
http://www.microsoft.com/security/protect/