Windows RPC Errors / New Virus

General discussion forum about the 240sx, and a great place to introduce yourself to the board!
BuudWeizErr
Posts: 4745
Joined: Tue Sep 24, 2002 11:35 am

Post

Since I know some of you will start getting this....

The virus pops up a window talking about A Remote Procedure Call being shut down by NT Authority/System and you have 60 seconds before it shuts down your computer. Here is the information you need to fix it.

How to fix: http://www.microsoft.com/techn...6.asp

How to prevent shutting down after getting the message: 2000/XP: Start > Run > "cmd" 95/98/ME/NT: Start > Run > "command" Go to the DOS prompt and type: shutdown -a

If the patch links go down off of MS's site, I have them on my comp and I will mirror them.

I would like to thank whoever started this. I will make about 200 dollars from just this virus alone. I had 3 service calls today just for this virus. However, it doesn't seem to be hitting firewalled networks as hard. My friends who are behind firewalls haven't reported the virus, and a couple of my networks are holding up fine to this....

Dialup users are just as vulnerable.

There is also a variant that closes the Ctrl-Alt-Delete Box and Registry editor 1 second after opening. I am not sure if these fixes will fix that also.


User avatar
fiznat
Posts: 5651
Joined: Sun Sep 15, 2002 10:15 am
Car: Grown up :(
Contact:

Post

jeez thanks man... I had that on my other computer downstairs... I saw that box and was like what the hell.....

man I already reinstalled windows and everything, hope I can undo the "fixing" I've already done.

How is this virus uhm.... contracted? Specifically, how can I avoid getting it again?

PS: it's true, I was on dialup and I dont even know what happened yet...

User avatar
Toahk
Posts: 1130
Joined: Sat Jan 18, 2003 4:02 pm
Car: 97 ....
Contact:

Post

I am running kerio firewall and I got it on both my comps through shared dial-up, the ms patch thats up, approx 1.3~ megs fixes it, but leaves msblast.exe in your registry, which I dont know if it is detrimental or not.

BuudWeizErr
Posts: 4745
Joined: Tue Sep 24, 2002 11:35 am

Post

get rid of msblast out of your registry.

As for firewalls, I mean actual hardware firewalls running NAT or internal DHCP or something.

i2ice4m3
Posts: 713
Joined: Mon Dec 30, 2002 2:11 pm
Car: COUNTERSTRIKE!

Post

does this mean my linksys router could be saving my comp? from what i understand it uses internal dhcp

[Zero-S]
Posts: 5295
Joined: Wed Apr 16, 2003 10:56 am
Car: Tell me whats wrong with this picture. 3 240's, only one runs.

Post

Your linksys router *should* have a hardware firewall..so yes. My microsoft (omg microsoft hardware) router hasn't let anything in....yet. But then again, my computer IS set up as a virtual DMZ so I may need to change that.


Return to “240sx General Discussion”