Panda and newdotnet clash

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have a interesting problem and havent been able to find anyone with the same problem. I was working on my mothers computer making sure she had no viruses or spyware. I came apon NewDot Net parasite. Well I couldnt get rid of it so I decided to install the Panda Demo to get rid of it. I have had luck with them before. The install went fine. It asked me to restart so I restarted. When I restarted it took a long time to load back. When I got back I got this

This system is shutting down. Please save all
work in progress and log off. Any unsaved changes will be
lost. This shutdown was initiated by NT AUTHORITY\SYSTEM.
Windows must now restart because the Remote Procedure Cal
(RPC) Service terminated unexpectedly

The toolbar never came up and I couldnt open any files on desktop. I was able to go it to properties through desktop and ctrl alt delete. That was it. Everytime I tried to restart it I got the little panda in the left bottom corner before desktop loaded. I found the unistall program for it, but I wondering what to do with it. Any help would help. Thank you.
 
Hi Rebeca,

You have a different problem now. This is the blaster worm. When the
shutdown warning appears, click start/run and enter "shutdown -a" to halt
the process. Information:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://www.pchell.com/virus/msblast.shtml
http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-039: A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious
Programs
http://support.microsoft.com/?kbid=824146

Problem is, you needed to install the patch BEFORE you got infected to avoid
it. The steps above will allow you to do this.

As to newdot net, see this link for full removal steps:
http://www.newdotnet.com/#remove

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone



Rebeca said:
I have a interesting problem and havent been able to find anyone with the
Click to expand...
same problem. I was working on my mothers computer making sure she had no
viruses or spyware. I came apon NewDot Net parasite. Well I couldnt get rid
of it so I decided to install the Panda Demo to get rid of it. I have had
luck with them before. The install went fine. It asked me to restart so I
restarted. When I restarted it took a long time to load back. When I got
back I got this:
This system is shutting down. Please save all
work in progress and log off. Any unsaved changes will be
lost. This shutdown was initiated by NT AUTHORITY\SYSTEM.
Windows must now restart because the Remote Procedure Call
(RPC) Service terminated unexpectedly.

The toolbar never came up and I couldnt open any files on desktop. I was
Click to expand...
able to go it to properties through desktop and ctrl alt delete. That was
it. Everytime I tried to restart it I got the little panda in the left
bottom corner before desktop loaded. I found the unistall program for it,
but I wondering what to do with it. Any help would help. Thank you.
 
Hi,

Ctrl+shift+escape, then use shutdown from the menu bar.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone



Rebeca said:
Anyway I can shut it down without using Start? The task bar doesnt show up
Click to expand...
at all.
 
I was affraid you would say that. Once the warning to shut down comes up it wont let you stop it from the menu bar. My mother said that when she left it to shut down it woudnt let her. It said the spam blocker (norton was blocking it). I tried to tell her over phone how to shut it, but it wouldnt let her after the warning popped up.
 
Anyway I can shut it down without using Start? The task bar doesnt show up at all.
Click to expand...

Press the Windows key on your keyboard and the start menu should pop
up.
 
It didnt do that either. I told her how to system restore. I am waiting to see how it goes.
 
Hi Rebeca,

When that worm kicks in, instead have her hit winkey+r, this will open a run
box. Then enter "shutdown -a" (without the quotes) to halt the process.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone



Rebeca said:
I was affraid you would say that. Once the warning to shut down comes up
Click to expand...
it wont let you stop it from the menu bar. My mother said that when she left
it to shut down it woudnt let her. It said the spam blocker (norton was
blocking it). I tried to tell her over phone how to shut it, but it wouldnt
let her after the warning popped up.
 
I missed your post. I had her restore. I will remember that for now on. Thank You for your help..... :)
 
Back
Top