system shutdown

[FoXeH]

at random times im getting a message, AUTHORITY/SYSTEM is telling me that it's about to turn off my pc in 60 seconds. i have no idea at all why and it seems random. i asked about it and was told it was a virus. i've tried to install a virus scanner but everytime i do it fails and the error occurs. what should i do?
i really can't afford a format at the moment

 

[FoXeH]

managed to get a virus scanner on. updated it, didn't find anything.
managed to get a firewall up too, im getting cloaking reports like crazy

 

[nocode]

Got same problems, so do some other ppl from my guild.
Check out this link its about a DCOM RPC buffer overrun bug thingy.

http://securityresponse.symantec.com/avcenter/security/Content/8205.html

 

[FoXeH]

wow, thanks ALOT!
i've patched and it hasn't shutdown for the past 20 minutes,(it used to every 3 mins) hope it doesnt
thanks!!

 

[FoXeH]

make sticky please alot of ppl r having probs with this

 

[nocode]

Oooh well atleast it helped u.
Still having prob. with both machines
dont get the shutdown error but unable to log into the game or keep downloading US patch.
cant even brows the internet normaly, have to log off from windows and log in again after 1 or 2 pages.

 

[Hit ^_^]

this might fix it.

XP
http://microsoft.com/downloads/deta...&displaylang=en

W2K
http://microsoft.com/downloads/deta...&displaylang=en

 

[razorboy]

first of all:

go to start - run, type "cmd", enter, and then "shutdown -a", enter. This will let you work on xp without xp rebooting every 5 minutes. The sites posted here will help you a good way further, but there are 2 worms circulating atm, so if you dont have the dcom worm you got the other one, w32.blaster.worm .

 

[Madonion Slicer]

There is a file on your PC called MSBlast.exe, most likely located in you windows/system32 directory, this is causing your problem.

Pretty much all decent virus programs are now on to this so i check your ones website for removal.

Get a decent firewall program running that will block ports, this bugger comes in on port 135.

I am on my way round to my cousins house at lunch time as it seems he has the same problem, will post my solution when i return.

 

[bob007]

Ok patch to close port has been posted.

http://www.sarc.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

This will remove worm.

 

[bob007]

On a 2nd note, If your useing an OS with system restore, Check for restore points within the last week or so. if you have any and had this worm I would advise you delete them and make new restore points. Windows system restore will store worms as well...