viris

[colm]

i have a viris on my system called worm blaster, how do i
rectify my computer. it constantly shuts down

 

[Carey Frisch [MVP]]

Apparently, your computer has an unwelcome visitor (VIRUS) known
as the WM32 Blaster/Lovsan WORM. It only takes a split second for
this WORM to infect your computer if a firewall is not enabled and you
have an active internet connection.

It entered the computer through the internet connection because the "firewall"
was not properly enabled and essential critical updates were not installed from
the Windows Update website. For instructions on fixing the problem, visit:

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

Remove W32.MSBlast.Worm
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

Blaster Worm: Critical Security Patch for Windows XP (32-bit version)
http://microsoft.com/downloads/deta...6C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

Then immediately turn-on Windows XP's built-in Firewall:

Protect Your PC
http://www.microsoft.com/security/protect/default.asp

 

[Bruce Chambers]

Greetings --

If you've connected the PC to the Internet without having first
enabling a firewall, without having first installed an antivirus
application with current virus definition files, and/or before
installing the KB824146 Hotfix, you're very likely to have been
infected from any of the thousands of PCs on the Internet that are
constantly broadcasting the Blaster and/or Welchia worms. It only
takes a few seconds of exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[The Unknown P]

I am not familiar with the run\shutdown -a method of
correcting the RPC issue when you have the blaster worm
and want to stay connected to the internet. The method
most recognized and used is to go into the administrative
tools\services in the control panel and then scroll down
to RPC and double click to open it and then click the
recovery tab. Now make a note of the setting presently on
all three recovery lines. Then click the drop down list
arrow to the right of each line and change the option
to "restart the service" and then click your way out. This
will keep your connection alive to get the repair tools.
www.sarc.com has some of the best worm repair tools. Keep
smiling.

 

[Crusty \(-: Old B@stard :-\)]

I have seen blaster shut down a computer, upon booting up, in 4-5 seconds,
far to quick to allow most people to do this.