Computer folks....

[The Shadow]

...getting an error message when online.

Says that Windows must shut down on authority of NT Authority\System...remote procedure call - service terminated


help?

 

[revexrevex]

bro you have the virus everyone got

go to www.symantec.com

there is removal tool right on front page i believe

if u need direct link ill give u

 

[the nature boy]

sounds like that virus possibly?

http://boards.elitefitness.com/forum/showthread.php?threadid=257346&highlight=rpc

 

[The Shadow]

no...this is a brand new computer - just out of the box about 2 hours ago

 

[The Red Dragon]

Did you go on the net or are you hooked up to a network?
New computers aren't guaranteed to be protected from a recent worm.

 

[The Shadow]

I accessed ziplip and then logged into EF.

 

[flexygrl]

You have the virus!!! Yes, it's possible.

 

[dy5]

no its a virus, it is shared through file sharing, it is a virus that exploits windows errors.
www.microsoft.com

 

[gsxr1000]

It's not shared through file sharing. It's a Microsoft security hole. It's called the DCOM RPC Buffer Overflow. It's a security flaw and the MSBLAST worm attacks on port 135. You need to patch you machine with the correct Windows patch and do a full system clean of your computer. Refer to this thread:

http://boards.elitefitness.com/forum/showthread.php?s=&postid=2805956#post2805956

 

[WarriorPL]

Here's the direct link...

http://www.microsoft.com/security/incident/blast.asp

I had it too bro... patch up before you get real screwed.

 

[jnuts]

no...this is a brand new computer - just out of the box about 2 hours ago

All the more reason for you to get it - the brand new system means it isn't patched.... Hopefully your are fixed now.

 

[The Shadow]

are we surea bout this....there have never been file sharing nor have I even opened an email since the computer was assembled. It also gives me 60 seconds to save open work.

 

[MarthaStewart]

are we surea bout this....there have never been file sharing nor have I even opened an email since the computer was assembled. It also gives me 60 seconds to save open work.

technically I think it is 59 seconds.

and yes, as long as you were connected to the net, then you could get it.

there are several open ports that it came through.

you don't need to have gotten it from a file or an e-mail.

to avoid such things in the future, get a hardware firewall - they are cheap (under $70) and while not foolproof, they help a lot.

patch it up and then once that is done and you are rebooted - install all the other patches as well.

 

[sk*]

technically I think it is 59 seconds.

and yes, as long as you were connected to the net, then you could get it.

there are several open ports that it came through.

you don't need to have gotten it from a file or an e-mail.

to avoid such things in the future, get a hardware firewall - they are cheap (under $70) and while not foolproof, they help a lot.

patch it up and then once that is done and you are rebooted - install all the other patches as well.

Yea, ...

For starters, get the personal firewall from www.zonelabs.com

-sk

 

[jnuts]

are we surea bout this....there have never been file sharing nor have I even opened an email since the computer was assembled. It also gives me 60 seconds to save open work.

Yes, we are sure. The worm does not come from email, nor does it come from file sharing. The RPC exploit comes through an open port that you don't have blocked.

 

[velvett]

Brand new?

Why aren't you sending it back to the manufacturer?

Or talking to tech support?

 

[sk*]

Its firewalled already - thus the confusion

I think it's a windows update bug, and most firewalls would say okay to that port. Unless you set it to ask you about every single port, and you okayed it once it asked ...

You can run the latest windows update and it will fix the problem, they have already included it.

Or go to the norton website and get that patch thing, or just run norton ...

-sk

 

[The Shadow]

Its firewalled already - thus the confusion

 

[velvett]

I was told from 3 sources that it was/is the virus.

I just ran the worm removal tool......



it wasnt the problem.


Tech has been busy all afternoon and I got it 2 hours away and dont have time to drive it back out there until after the show this weekend

I would be livid.

 

[The Shadow]

Brand new?

Why aren't you sending it back to the manufacturer?

Or talking to tech support?

I was told from 3 sources that it was/is the virus.

I just ran the worm removal tool......



it wasnt the problem.


Tech has been busy all afternoon and I got it 2 hours away and dont have time to drive it back out there until after the show this weekend

 

[The Shadow]

I would be livid.

lol


you should hear the story of my weekend and attempts just to GET this hunk of shit

 

[jnuts]

I was told from 3 sources that it was/is the virus.

I just ran the worm removal tool......



it wasnt the problem.


Tech has been busy all afternoon and I got it 2 hours away and dont have time to drive it back out there until after the show this weekend

Did you run this tool?

http://securityresponse.symantec.com/avcenter/FixBlast.exe

or check this?

http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

I'm mighty surprised that it's not an RPC worm that hit you.

 

[jnuts]

BTW, to fix that 60 sec limitation....

Change your computer clock to one year or so back, after the window pops up. Your computer won't force a reboot for a looooong time.

 

[The Shadow]

Did you run this tool?

http://securityresponse.symantec.com/avcenter/FixBlast.exe

or check this?

http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

I'm mighty surprised that it's not an RPC worm that hit you.

yep...downloaded the fixblast - says no blaster worm was found.

 

[jnuts]

Well... I bow to confusion, though I still think you are infected somehow. My reccomendation is to reset your clock after the popup, so you have enough time to download all of the system patches and updates....

If that doesn't fix it, yer looking mighty fucked......

 

[jnuts]

Direct link to the patches so you don't have to do the windows update thang:

http://securityresponse.symantec.com/avcenter/security/Content/8205.html

 

[The Shadow]

Ill try the last link as well...thanks

 

[jnuts]

^ .... I need closure... did you ever find out what the problem was?