General discussion


wierd problem(virus?)

By ngen255 ·
hello. i have a problem with my computer. sometimes, a little window will pop up informing me that remote something or other has unexpectedly terminated, and that the computer will shut down in one minute. it then counts down, and at the end restarts the computer. i have never had this problem before. it recently started just a week ago. i believe it may be a virus, as I only recently got an anti-virus program. however, the anti-virus program does not detect any problems(I am using AVG Free). Also, when my computer starts up, it automatically trys to connect to the internet, saying that it needs to connect to "ryan1**". i do not know what this means? And whenever I press ctrl-alt-del, the window pops up for a few seconds, then immediately closes. what might be causing this problem? as i said, these problems only recently started. i am currently using winxp pro, dialup, 128mb ram, 800mhz AMD Athlon

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by Joseph Moore In reply to wierd problem(virus?)

If I am right on this, you have been compromised using the new RPC vulnerability that was announced a few weeks ago. This was described in Microsoft Security Bulletin MS03-026.

You should go to this web page:
(please remove any spaces)

Read this article, then click the link to get the patch.

There are new tools and trojan programs out there that are exploiting the RPC vulnerability. And when the trojan is used incorrectly (or if it is an early version), then all it does is crash the RPC service, which forces Windows to shutdown with the 60 second countdown box you are seeing.

Anyway, get the patch from Microsoft. Then, run a fully updated anti-virus scan on your system immediately!

Sorry for the bad news.

Collapse -

by ngen255 In reply to

thanks...this worked...but what about the other problem with the ctrl-alt-del?

Collapse -

by jschein In reply to wierd problem(virus?)

This is a pc hijack. Just removed it from a friends home computer.

Goto support - downloads

Download their free adaware program, install it, run it, update it, then scan.

It will remove the hijack.

Reboot pc, all is well.

Good Luck.

Collapse -

by ngen255 In reply to

nope...problem still persists...the RPC problem is fixed, though

Collapse -

by ngen255 In reply to wierd problem(virus?)

found the solution...d/led a program from trend micro that found it for me

Collapse -

by SilverGoldfish In reply to wierd problem(virus?)

for a complete step by step fix for the RPC vulnerability Win32.Blaster.Worm go to:

Collapse -

by ngen255 In reply to
Collapse -

by ngen255 In reply to wierd problem(virus?)

This question was closed by the author

Related Discussions

Related Forums