Author Topic: virus for winxp: remote process control failure (Read 2285 times)

moose · « **on:** August 11, 2003, 08:56:54 PM »

anyone else get this? i did after 12pm today and my friend was getting calls from all of his clients about it too.

unless you change the service properties, windows will restart every time rpc fails. erk.

****ing microsoft ****box easily hacked software.

fd ski · « **Reply #1 on:** August 11, 2003, 09:02:38 PM »

3 words:
patch your s__t

majic · « **Reply #2 on:** August 11, 2003, 09:10:57 PM »

Go it, fixed it. My bro's an IT guy and he walked me through the fix despite him being massively busy fixing his company's computers at work.

Fishu · « **Reply #3 on:** August 11, 2003, 09:20:19 PM »

I wonder if a guy I know has this...
He was earlier complaining about his windows being force restarted with a countdown every now and then.

Never got to ask him if windows tells him why it's forcing restart.

majic · « **Reply #4 on:** August 11, 2003, 09:22:36 PM »

That's the one.

XNachoX · « **Reply #5 on:** August 11, 2003, 09:54:11 PM »

So, uh....how do you fix it? My friend has this problem.
__________________

Misty tales and poems lost
All the bliss and beauty will be gone
Will my weary soul find release for a while
At the moment of death I will smile
It's the triumph of shame and disease
In the end Iliad
4,/JG 53

AKIron · « **Reply #6 on:** August 11, 2003, 10:00:54 PM »

It's the w32.blaster.worm

For XP or ME

-Turn off system restore
-From task manager, shut down msblast.exe
-Run your antivirus scan, let it remove virus
-edit registry, remove the run msblast.exe

XNachoX · « **Reply #7 on:** August 11, 2003, 10:43:01 PM »

some of my friends are saying msblast isn't running and the anti-virus picks up nothing? Any more tips? Google isn't helping

Ozark · « **Reply #8 on:** August 11, 2003, 11:12:28 PM »

http://www.net-integration.net/zeroscripts/msblasta.html

XNachoX · « **Reply #9 on:** August 11, 2003, 11:21:26 PM »

Quote

Originally posted by Ozark
http://www.net-integration.net/zeroscripts/msblasta.html

I'm telling you they can't find msblast.exe in processes. I found a quick fix for them though, when the message pops up, start >> run >> cmd >> type shutdown -a and that will abort the reboot. Should work until we find a fix

Ozark · « **Reply #10 on:** August 11, 2003, 11:27:23 PM »

Did you get the patch?

XNachoX · « **Reply #11 on:** August 11, 2003, 11:37:35 PM »

Quote

Originally posted by Ozark
Did you get the patch?

Patch fixed it for him, you can get it at http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en
__________________

Misty tales and poems lost
All the bliss and beauty will be gone
Will my weary soul find release for a while
At the moment of death I will smile
It's the triumph of shame and disease
In the end Iliad
4,/JG 53

majic · « **Reply #12 on:** August 11, 2003, 11:45:34 PM »

Apparently, it can still cause problems for your system from other computers. The patch stops that. I checked my registry and it wasn't there either.

Lazerus · « **Reply #13 on:** August 12, 2003, 01:38:06 AM »

I have the system shutdown box on my desktop right now, been trying to fix it for last 1.5 hours. Figures I'd find the answer here:D

Shutdown box popped up but the timer never started ticking this last time. I've had it pulled down to the bottom of the screen for 20 minutes or so.

moose · « **Reply #14 on:** August 12, 2003, 06:08:35 AM »

you can prevent it from doing the autoshutdown by changing the RPC service properties in windows management. i just set mine to attempt to restart the service when it failed instead of making me reboot.

i'm at work right now, when i get home i'll get the damn thing outta my system.

what annoys the crap outta me is that it came in via an open port, not even by my own stupid email or whatever. i havent downloaded a virus that i can remember but this somsqueak found me.