xp shutdowns when it fells like it

[mr_anderson187]

ok so i just got my pc built with my friend
it aint brilliant but it only cost me 300 quid, its got
athlon 1.6ghz pcr
maxtor 40gb hard drive
asus x series motherboard
radeon 9600se gfx card
256meg ddr ram


but the problem is, im running windows xp, with service pack one, and every ow and then, its done it 4 times already, it brings up a wee window,telling me to stop what im doing because its goin to shutdown.

sorry i cant remember exactly waht it said, but, it said it was to do with the rpc, remote procedure somwthing, when it does it again, ill get a screenshot. plz help me someone this is tainting my new c experience

plz plz

[joshwa]

blaster / or welchia worm.

you need to:
1. update windows: http://windowsupdate.microsoft.com
2. get antivirus software and update eg (eg www.grisoft.com) is free
3. get a firewall or turn on the XP firewall.

[Allen]

You got the worm MSBlast me thinks! Haven't got any links at work for the fixes and MS or Symantec sites, but have a look round this forum I'm sure you'll find them somewhere!

[Allen]

1. update windows: http://windowsupdate.microsoft.com

If it's MSBlast, won't it disable access to windows update? Denial of service of something like that?

[mr_anderson187]

id say ure right, but ive never had to get it for xp, krap, but it says it was initaited by the sumthim smthin, which soounds like its inside the pc,
u sure its MSblast?

[mr_anderson187]

ok, so im downloadin the ms blasterworm removal thing, du think that will work?, or am i wayyyy off?

[Allen]

id say ure right, but ive never had to get it for xp, krap, but it says it was initaited by the sumthim smthin, which soounds like its inside the pc,
u sure its MSblast?

svchost.exe? I think that was what it was called...

Go into Task Manager and see if MSBlast.exe is running, or search for it on your hard drive. If it's there, it's most definately that causing it.

Does it give you a 60 second countdown before it restarts?

[mr_anderson187]

yeah lol 60seconds, does that help define that its msblast worms?

[Allen]

Yes, that's it.

[mr_anderson187]

ok, in task manager, there is two svchost programs running, but no msblast, will i end these svchost ones?

[Allen]

Not too sure. I'm sure that svchost.exe are processes that run normally on an uninfected machine, I think the Blaster worm uses them somehow. Not sure how it all works really.

Downloading and running the remove tool from Symantec and installing the patch from Microsoft should fix your problem...

[Jiff Lemon]

If you've a spare machine that can connect to the internet, then download this .

Copy that onto a disk and install it on the infected machine.

You should then be able to follow Josh's tips.

to prevent the shutdowns, you can click on start, run, cmd (enter)
You'll get a DOS style box, type in shutdown -a (enter)


Keep this box open, and pressing up arrow will save you having to retype each time

[mr_anderson187]

theres another problem, well it could maybe be fixed, the disk drive and cdrw is slightly scuppered in this machine, and it wont write to a disk, i often ftp between this machine and an xbox, but i dont know the username of my computer or its password or its ip address, where on my new pc would i find these, so i could move the patch oveer the network cable

[mr_anderson187]

ok its takin 4 eva but i think i got that file on a floppy, it says no furhter action is needed, will i need further action?

[nichomach]

theres another problem, well it could maybe be fixed, the disk drive and cdrw is slightly scuppered in this machine, and it wont write to a disk, i often ftp between this machine and an xbox, but i dont know the username of my computer or its password or its ip address, where on my new pc would i find these, so i could move the patch oveer the network cable

IP address is easy - open a command prompt and type in "ipconfig /all". It'll return your current TCP/IP config (address, default gateway, WINS and DNS servers, whether it's using DHCP, MAC address of network card etc).

Typing in "net user" will list user accounts on the machine.

[Jiff Lemon]

ok its takin 4 eva but i think i got that file on a floppy, it says no furhter action is needed, will i need further action?

Follow Josh's advice.

1. update windows: http://windowsupdate.microsoft.com
2. get antivirus software and update eg (eg www.grisoft.com) is free
3. get a firewall or turn on the XP firewall.