Remote Call Procedure Error - W32.Blaster.Worm

[Wolfe Tone]

What is it and why does it keep wanting to shut my computer down. A Win32 generic host error pops up then it gives me 60 seconds to shut down. It's really annoying me. I would have worded this better but I'm rushing against the clock to type it out

 

[ainwood]

Does it look similar to the attached picture?

If so, apparently its a virus. Try scanning for it, an removing it. Sorry, can't be any more help than that....

 

[GenMarshall]

I know the answer. This has happened to me 7 times already. Luckly Joeb gave me the link on how to administer First Aid to the computer.

RPC Vunrability Fix

Go there and follow the instructions

 

[Wolfe Tone]

Yes that is the problem, I'm following the instructions now to fix it. Could any one tell me what caused it, so I can avoid it in the future.

EDIT: The file it says to download apparently doesn't work with the build of XP I've got. I don't know whether to go ahead with the reg edit.
Also msblast.exe can't be located

EDIT2: There is also no registry entry for msblast.

 

[History_Buff]

This virus, preying on a recently announced vulnerability of newer windows OS's causes your computer to restart, with only 1 minutes notice. If you have this virus, look here:

http://www.gamecatcher.net/fora/viewtopic.php?t=2714

 

[Duke of Marlbrough]

Here's a little more info on how it gets on your system.
http://insight.zdnet.co.uk/0,39020415,39115633,00.htm

 

[jbmagic]

follow the steps that on this web page to fix the worm virus that affecting windows xp users.


http://www.max-studios.net/windowsxp/RPC/


also do a windows update too

thanks

 

[Knight-Dragon]

I also just got hit with that last night.

There's a patch file for XP that'll solve the problem...

 

[Wolfe Tone]

The patch doesn't seem to work. It says that it only works on Build 2600, and I have something like Build 2562. Does anyone know what I should do.

 

[nixon]

Try this: http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

 

[Wolfe Tone]

I tried that also, it shows that there is no trace of msblast anywhere. Though it still wants to shut down my computer.

 

[nixon]

Can't you disable it in Windows Task Manager, then do a search on the computer and in the registry, and then delete whatever entries it may find?

Also, make sure you have updated your antivirus and firewall apps.

 

[Duke of Marlbrough]

I followed this:

RPC Vunrability Fix

It worked great. Especially the part about running 'shutdown -a' that at least let my system operate as normal so I could actually download the patch. It also has a link for people with different operating systems other than XP.

 

[MaDmAn_71]

A friend of mine had this problem too. I got him to get a firewall, and it blocked any shutdown thing since. If all else fails, you could try that.

You can get Zonealarm here. (Free commercial firewall)
Zonelabs

 

[phoenix_night]

Well my firewall has done its job, no problems for me.

 

[Mikoyan]

Originally posted by phoenix_night
Well my firewall has done its job, no problems for me.

Yeah, firewalls rock.

I haven't had any problems with intrusions and stuff since I got my beloved router.

 

[Wolfe Tone]

Yep, I got a new firewall last night. It seems to have done the trick.

 

[Bazzani]

I was on my computer one day and my computer just restarted without any warning and now windows xp won't boot up. A black and white screen shows up when I start my computer saying that windows couldn't load because of a recent hardware or software change. Then it gives me a list of options asking if i want to boot up Normal, Last Known Configuration, Safe Mode with Networking, Safe Mode with Command Prompt and Safe Mode. I haven't made any software or hardware changes for as long as I can remember and the computer was working perfect up until then. It has gotten so bad that sometimes when I turn on the computer nothing happens at all, I just stare at a blank screen. I haven't been able to load windows once since then. Can somebody please help me. Please Post or E-mail me at bazzani186@yahoo.com Thanks.

 

[dannyevilcat]

I went in to work today after 3 days off, and was amazed at the volume of calls we got of infected computers.

In a perverse sort of way, I kind of admire it.

 

[SpikeSpiegelJKD]

I had this virus, and actually got rid of it today. It only took me about 20 minutes to do so. Just follow all of the instructions on this page.

http://www.joi-odp.org/