Discussion Locked

wierd problem(virus?)

0 helpful

8 replies

by ngen255 Aug 7, 2003 last reply Aug 29, 2003 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

hello. i have a problem with my computer. sometimes, a little window will pop up informing me that remote something or other has unexpectedly terminated, and that the computer will shut down in one minute. it then counts down, and at the end restarts the computer. i have never had this problem before. it recently started just a week ago. i believe it may be a virus, as I only recently got an anti-virus program. however, the anti-virus program does not detect any problems(I am using AVG Free). Also, when my computer starts up, it automatically trys to connect to the internet, saying that it needs to connect to "ryan1918.cjb.net". i do not know what this means? And whenever I press ctrl-alt-del, the window pops up for a few seconds, then immediately closes. what might be causing this problem? as i said, these problems only recently started. i am currently using winxp pro, dialup, 128mb ram, 800mhz AMD Athlon

8 replies

by joseph moore Aug 7, 2003

If I am right on this, you have been compromised using the new RPC vulnerability that was announced a few weeks ago. This was described in Microsoft Security Bulletin MS03-026.

You should go to this web page:
http://www.microsoft.com/security/security_bulletins/ms03-026.asp
(please remove any spaces)

Read this article, then click the link to get the patch.

There are new tools and trojan programs out there that are exploiting the RPC vulnerability. And when the trojan is used incorrectly (or if it is an early version), then all it does is crash the RPC service, which forces Windows to shutdown with the 60 second countdown box you are seeing.

Anyway, get the patch from Microsoft. Then, run a fully updated anti-virus scan on your system immediately!

Sorry for the bad news.