Help I've Got The Worm Blaster Thingy Again

homerxhomerx Join Date: 2003-04-01 Member: 15094Members
in Off-Topic
<div class="IPBDescription">HELP</div> Please provide a link that will get rid of this. <!--emo&:(--><img src='http://www.unknownworlds.com/forums/html/emoticons/sad.gif' border='0' style='vertical-align:middle' alt='sad.gif'><!--endemo-->

Thanks in advance.
Off Topic Disagree Agree Awesome

Comments

  • homerxhomerx Join Date: 2003-04-01 Member: 15094Members
    I'm not 100% sure that this is the same worm blaster thingy but it's the type that lets your go online for about 10 minutes then this little window will pop up and say that I have 1 minute before my computer restarts/shuts down blah blah...

    Need help ASAP please. <!--emo&:(--><img src='http://www.unknownworlds.com/forums/html/emoticons/sad.gif' border='0' style='vertical-align:middle' alt='sad.gif'><!--endemo-->
    Off Topic Disagree Agree Awesome
  • uranium_235uranium_235 Join Date: 2002-11-20 Member: 9478Banned
    www.norton.com?
    Off Topic Disagree Agree Awesome
  • uranium_235uranium_235 Join Date: 2002-11-20 Member: 9478Banned
    edited December 2003
    <!--QuoteBegin--homerx+Dec 13 2003, 02:30 AM--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (homerx @ Dec 13 2003, 02:30 AM)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin--> I'm not 100% sure that this is the same worm blaster thingy but it's the type that lets your go online for about 10 minutes then this little window will pop up and say that I have 1 minute before my computer restarts/shuts down blah blah...

    Need help ASAP please.  <!--emo&:(--><img src='http://www.unknownworlds.com/forums/html/emoticons/sad.gif' border='0' style='vertical-align:middle' alt='sad.gif'><!--endemo--> <!--QuoteEnd--></td></tr></table><span class='postcolor'><!--QuoteEEnd-->
    That stupid thing? Update windows and it goes away. It was a security hole that tied... grr I forget the name of it, some server.exe thing, it was a failsafe that if it failed, the computer would restart. They released a security patch in like a day that neutralized the problem.
    Off Topic Disagree Agree Awesome
  • homerxhomerx Join Date: 2003-04-01 Member: 15094Members
    Link please... I'm not really good at this and I feel stupid...

    I heard there was this thing I could download to take care of it...
    Off Topic Disagree Agree Awesome
  • uranium_235uranium_235 Join Date: 2002-11-20 Member: 9478Banned
    edited December 2003
    Open IE -> Tools -> Windows Update

    Tada. I had the same thing and I got my computer up just long enough to update it and it never happened again after it.
    Off Topic Disagree Agree Awesome
  • homerxhomerx Join Date: 2003-04-01 Member: 15094Members
    I just updated it.... I hope this works.... *Waits for 10 minutes*
    Off Topic Disagree Agree Awesome
  • homerxhomerx Join Date: 2003-04-01 Member: 15094Members
    This sucks... It didn't work... I re-updated it again... *Waits for 10 more minutes*...

    Anybody out there know any other solutions? Please help <!--emo&:(--><img src='http://www.unknownworlds.com/forums/html/emoticons/sad.gif' border='0' style='vertical-align:middle' alt='sad.gif'><!--endemo-->
    Off Topic Disagree Agree Awesome
  • homerxhomerx Join Date: 2003-04-01 Member: 15094Members
    DAMN IT! <!--emo&:angry:--><img src='http://www.unknownworlds.com/forums/html/emoticons/mad.gif' border='0' style='vertical-align:middle' alt='mad.gif'><!--endemo-->

    For some odd reason the update isn't woking for me....

    Suggest other fixes... Please...
    Off Topic Disagree Agree Awesome
  • PulsePulse To create, to create and escape. Join Date: 2002-08-29 Member: 1248Members, Constellation
    Try <a href='http://securityresponse.symantec.com/avcenter/FixBlast.exe' target='_blank'>this</a>. <!--emo&;)--><img src='http://www.unknownworlds.com/forums/html/emoticons/wink.gif' border='0' style='vertical-align:middle' alt='wink.gif'><!--endemo-->
    Off Topic Disagree Agree Awesome
  • JimmehJimmeh Join Date: 2003-08-24 Member: 20173Members, Constellation
    When it comes up set your clock back a few hours.
    Off Topic Disagree Agree Awesome
  • homerxhomerx Join Date: 2003-04-01 Member: 15094Members
    Thanks for the link but it didn't work.... The worm wasn't found.... Maybe this is a different one....
    Off Topic Disagree Agree Awesome
  • PulsePulse To create, to create and escape. Join Date: 2002-08-29 Member: 1248Members, Constellation
    edited December 2003
    press ctrl-alt-del and tell us the exact filename of the worm (and try to end it if possible).
    Off Topic Disagree Agree Awesome
  • homerxhomerx Join Date: 2003-04-01 Member: 15094Members
    Jimmeh you are a genius!

    But that is only a temporary solution. I wanna get rid of it permanently.


    It's filename is just System Shutdown. In the window it says this:

    This system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by NT AUTHORITY\SYSTEM

    Time before shutdown: 03:57:34 (Thanks to Jimmeh LOL)


    Message

    Windows must now restart because the Remote Procedure Call (RPC) service terminated unexpectedly.
    Off Topic Disagree Agree Awesome
  • AkalamanaiaAkalamanaia Join Date: 2003-01-04 Member: 11833Members
    Every time ya start Windows go to command line and type shutdown -a or shutdown a, you got a lovesan virus not msblaster 32. Get lovsan deleting equipment and restart computer, search for it, if it doesnt find ya gotta type shutdown -a or shutdown a at startup in the commandline.
    Off Topic Disagree Agree Awesome
  • homerxhomerx Join Date: 2003-04-01 Member: 15094Members
    Can someone please provide a link for this "lovesan deleting equipment"?

    I'm a frikkin noob at this stuff....
    Off Topic Disagree Agree Awesome
  • PulsePulse To create, to create and escape. Join Date: 2002-08-29 Member: 1248Members, Constellation
    edited December 2003
    Msblast <i>is</i> lovsan. Have a look for yourself right <a href='http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html' target='_blank'>here</a>.

    Whatever this is, you can probably get rid of it with a virus scanner, you might try <a href='http://www.trendmicro.com' target='_blank'>House Call</a>, which is an online browser imbedded virus scanner.

    [edit] Are you sure you were looking in the "Processes" section of the task manager (ctrl-alt-del) and not the "Applications" section? A virus usually only shows up as a process. [/edit]
    Off Topic Disagree Agree Awesome
  • MulletMullet Join Date: 2003-04-28 Member: 15910Members, Constellation
    <a href='http://securityresponse.symantec.com/avcenter/FixBlast.exe' target='_blank'>Click here to get the removal tool</a>

    That tool will just get rid of the blaster worm, when it's finished it should offer a link telling you what patch you need to get so that your computer isn't vulnerable anymore.

    Goodluck! <!--emo&:)--><img src='http://www.unknownworlds.com/forums/html/emoticons/smile.gif' border='0' style='vertical-align:middle' alt='smile.gif'><!--endemo-->
    Off Topic Disagree Agree Awesome
  • Daza4Daza4 Kerc Kasha Join Date: 2003-04-06 Member: 15233Members
    edited December 2003
    I thought the blaster worm turned off after awhile... 'cause if i remember right someone said that he stops spreading etc at a certain date which was october something i think.
    Off Topic Disagree Agree Awesome
  • MulletMullet Join Date: 2003-04-28 Member: 15910Members, Constellation
    Just because he might have stopped, it dosn't mean that infected users still can't spread it <!--emo&:0--><img src='http://www.unknownworlds.com/forums/html/emoticons/wow.gif' border='0' style='vertical-align:middle' alt='wow.gif'><!--endemo-->

    ...I think. <!--emo&:)--><img src='http://www.unknownworlds.com/forums/html/emoticons/smile.gif' border='0' style='vertical-align:middle' alt='smile.gif'><!--endemo-->
    Off Topic Disagree Agree Awesome
  • RustySpoonRustySpoon Join Date: 2003-07-10 Member: 18069Members
    I had something like that. Just use <a href='http://housecall.trendmicro.com/housecall/start_corp.asp' target='_blank'>House Call</a> to find it.
    Off Topic Disagree Agree Awesome
Sign In or Register to comment.