Anyone else experiencing this??? I'm on a computer at work and I'm curious as to whether or not anyone's experiencing the same thing as my computer at home?? It started yesterday afternoon and what it does is, a message box appears on the middle of the screen titled-"System Shutdown" and then I sit there, helplessly as it counts down to zero from sixty!!! I tried contacting my ISP (Verizon) and they said it wasn't on their end. My friend has Comcast and two different computers did the same thing at his house. Once again, Comcast said it wasn't on their end. Verizon has gone as far as leaving a recording stating they are of the "Internet wide virus" and it's not on their end....oh yeah, I reformatted my entire hard drive and it STILL did it!!! Has anyone experienced this yet???
This is a know bug in WinXP, Win2000, and NT. Script kiddes are exploiting the bug and using it to DOS attack systems all over the place. Go to the windows update page and download the patch for it, and you'll be good to go. Be sure to update your anti-virus software and scan for trojans that might have been left behind. It's spreading like wildfire all over the net. There's a blurb about it on CNN.
Thanks!! Jim, I'll try that when I get home...the problem is I can't seem to stay CONNECTED long enough to do ANYTHING!!!! Thanks for the info!!
I got it last night at home also. Can somebody post a link to the patch? Can I download it here at work and put it on a floppy to take home?
When the shutdown screen comes up, go to -> start -> run and type in 'shutdown -a' and hit enter, that'll stop the shutdown process and you should be able to get the patch. Here's a link to a thread at AnandTech Forums where they're talking about it. Lot's of good info and links for removing and fixing infected systems.
Here is a link to patches for this from our works website, http://support.integraonline.com/winfix.html
I wish they would od more to punish people who write this stuff. Anyone and anyting can be found out if they look hard enough. When a man hunt is on for a killer it never takes long cause they go looking for real. But people like this they just wait for them to stumble inthe wrong door. Put a few 15 year oldd in jail for 20 years for being a script kiddy and watch things change. Matt uzzled:
Straightened mine out today (I hope!) I also enabled the firewall that comes with XP, but I'm not sure how good that program is. I read on some sites that specific ports should be blocked. Be sure to get yours fixed before the 16th! I read that on the 16th it's set to flood the windowsupdate site through infected computers. My guess is that it would be difficult to download the patch on that day! ou:
I got the worm yesterday... Used the Norton fix and the MS patch and I think it is gone now... I hope.... I think it only hits windows 2000 and XP.... I have XP
Got it! I just bought a new comp. last week due to my old one not working properly and just plain old. Now my new one is shutting down like y'all's. Ain't life fun. I will try to fix it tom. Thanks for the tip Alan. I am now back to using my old comp. Jimmy
When the system comes up with the warning box and says it's shutting down in 60 seconds, go to 'start' then 'run' and enter 'shutdown -a' and click 'ok', to stop it from happening. That should give you plenty of time to download the patch and repair tools, and fix it.
Up and running.........for now....... I spent a good 6 hours yesterday afternoon-evening reformatting my hard drive-AGAIN-and ridding my laptop of that damn MSBlast worm!! I had to download 40 updates from the Mircosoft site!! I guess maybe I should check for updates a little more often, huh? Now, my Norton 2003 is giving me a hard time. I loaded it and, of course, the damn thing froze up on me just as the NAV finished installing. Now it freezes up from time to time and the entire Norton was completely loaded. I uninstalled it this morning before coming here (work) and I'll have at it again when I get home today. I guess I should be thankful I no longer have that F*&%ING worm!! Anyone know how to COMPLETELY get rid of all the NAV files??
Its MSBLASTER, poorly written, but effective worm. Nice, very nice. Its not harmful, just annoying. The link at symantec is http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html Oh, and for anti-virus, I use AVG, its FREE, updates are FREE... but it can't remove the msblaster worm... it does, however, detect it.
%*&# a compucker Excuse my language but %*&$ a compucker. I can't seem to fix my new Windows XP equiped comp. of the new virsus! I can't stay on line long enough to download the patch and the shut down can not be bypassed by me. I am not very compucker savvy and I don't think there is enough beer in eastern NC for me to fix it. Anyone want to come do it for me? I might have 4 beers left out of my 12 pack!!!!!!!!! Jimmy
worm I suggest if anybody has gotten this virus they delete off they're pc before saturday, if not it will get worst. patches needed are here: http://us.mcafee.com/root/landingpa...617&siteID=sDj7suGVYpc-IZgpJwj/8wutp0gXB5SGUA follow simple directions and it will fix it. For those of you with Mcafee, updates are on the website every week (thursdays i belive) update them,you need them or else your mcafee software is useless without the new updates. you can email me if u need help with that marvinmanzano@sbcglobal.net
1 minute I have maybe 1 minute before my compucker shuts down. I tryed to type in www.windowsupdate.microsoft.com which was in the newspaper, but I keep getting a message about "not veiwable off line" and I am really online ( I think ). I think it is time for someone else to fix it. Jimmy
Must be hitting a lot of people. I just got ths from my ISP. :eek2: Currently there is an Internet worm affecting users who are running Windows XP, 2000, NT, Server 2003. If you currently are running this operating software on your PC, IT IS STRONGLY RECOMMENDED THAT YOU RUN AND INSTALL THE PATCH FOR THIS WORM. THIS IS a 2-STEP PROCESS. --FIRST YOU MUST RUN THE TOOL TO CHECK FOR AND REMOVE THE WORM --SECONDLY, YOU MUST INSTALL THE WINDOWS PATCH TO KEEP THE WORM FROM REINSTALLING ITSELF ON YOUR MACHINE. WHAT DOES THE WORM DO? -------------------------------- Blaster randomly searches the Internet for vulnerable computers. When it finds and infects one, it downloads a file, msblast.exe, which causes the shutdowns. As Blaster downloads the file and searches for other vulnerable computers, it can slow Internet traffic. Blaster also contains a trigger to flood Microsoft's windowsupdate.com web site with traffic beginning Saturday. That could effectively shut down the Web site, making it nearly impossible for computer users to obtain the security patch. WHAT IF I DON'T INSTALL THE PATCH? ------------------------------------ The virus will cause computers that are infected, to shut down unexpectedly. Sometimes, a Windows error message will warn of the impending shutdown, saying, "RPC service has unexpectedly terminated." The virus so far has not been found to delete files or destroy data. HOWEVER, THE VIRUS RENDERS YOUR PC UNUSABLE. HOW DO I CHECK FOR AND REMOVE THE BLASTER WORM? ------------------------------------------------------------------ Follow these directions step-by-step to install this tool that are provided by Symantec The W32.Blaster.Worm Removal Tool does the following: 1. Terminates the W32.Blaster.Worm viral processes. 2. Deletes the W32.Blaster.Worm files. 3. Deletes the dropped files. 4. Deletes the registry values that the worm added OBTAINING AND RUNNING THE TOOL ------------------------------------------ NOTE: You need administrative rights to run this tool on Windows 2000, or Windows XP. 1. Download the FixBlast.exe file from: http://securityresponse.symantec.com/avcenter/FixBlast.exe 2. Save the file to a convenient location, such as your downloads folder or the Windows Desktop (or removable media that is known to be uninfected, if possible). 3. To check the authenticity of the digital signature, refer to the section, "Digital signature." 4. Close all the running programs before running the tool. 5. If you are running Windows XP, then disable System Restore. Refer to the section, "System Restore option in Windows Me/XP," for additional details. CAUTION: If you are running Windows XP, we strongly recommend that you do not skip this step. The removal procedure may be unsuccessful if Windows XP System Restore is not disabled, because Windows prevents outside programs from modifying System Restore. 6. Double-click the FixBlast.exe file to start the removal tool. 7. Click Start to begin the process, and then allow the tool to run. NOTE: If, when running the tool, you see a message that the tool was not able to remove one or more files, run the tool in Safe mode. Shut down the computer, turn off the power, and wait 30 seconds. Restart the computer in Safe mode and run the tool again. All the Windows 32-bit operating systems, except Windows NT, can be restarted in Safe mode. For instructions, go to http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406 8. Restart the computer. 9. Run the removal tool again to ensure that the system is clean. 10. If you are running Windows XP, then re-enable System Restore. 11. Run LiveUpdate to make sure that you are using the most current virus definitions. When the tool has finished running, you will see a message indicating whether W32.Blaster.Worm infected the computer. In the case of a worm removal, the program displays the following results: O Total number of the scanned files O Number of deleted files O Number of terminated viral processes O Number of fixed registry entries HOW DO I INSTALL THE WINDOWS PATCH? ------------------------------------------------- After you have checked for and removed the worm, you need to go to Microsoft to also install the patch to prevent this worm from re-infesting your machine. http://windowsupdate.microsoft.com Follow the instructions to install this patch for your machine. TO LEARN MORE ABOUT THE WORM, YOU CAN GO HERE: ---------------------------------------------------------------- http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html IF YOU STILL HAVE QUESTIONS AFTER INSTALLING THESE UPGRADES
