Help Me

Everytime I turn on my computer I get booted. It gives me a 1 minute countdown to save/ complete tasks.

The message says

This system is shutting down. Please save

more later times up

 

chetdoug: Welcome to the Board!

Several other people are submitting posts, having similar trouble. Check the thread just a few down below yours entitled "(RPC) Service terminated unexpectedly" and see what's said there. Good luck.

 

Wow! This one is getting out of hand. I've done little but answer this one by emaila nd phone today. The patch is here.

Please people, do yourselves a favour and go do your critical wiindows updates!

If you're having a hard time staying connected long enough to get the patch... try enabling XP's firewall first.....and downloading. (I've not tried it myself...but it's a theory)

 

Hi Daizy

You mention turning on the XP Firewall. Are you saying that a Firewall will help to keep this stuff out of our machines.

Also I have a Router Which I think helps.

I also run a software firewall ( Kerio ) Activated FULL TIME. ( XP firewall is not used )

I also Keep Cleaner3 from Moosoft updated. It has had updates just about every day lately.

Also as a suggestion I recommend users to get MailWasher to pre-screen e-mail.

I had three very suspicious e-mails to day. One was a returned mail from somewhere that I never sent any mail too. The name before the @ was correct. But after the @ was not.

HIGHLIGHT AND DELETE Never gets downloaded.

Thses may seem like small things but I do believe they help BIG TIME.

BillyBob

 

Nope BB, I'm surely not saying XP's firewall will help. (I personally think it's ****.) It was just a thought on how some of these people can keep their connection going long enough to download the patch.

Let me repeat this adnauseum...... EVERYONE running XP or 2000..... do your CRITICAL updates. In particular get the patch I mentioned earlier. This one is hitting fast and furiously.


*edit*
Please don't misinterepret my above post. Of COURSE everyone should be firewalled. Preferably with anything (ZoneAlarm, Outpost, hardware firewalls....etc)

 

The XP firewall is an all-or-nothing (port either open or closed) inbound application. If you block all the inbound ports this critter wants to use you will be safe. But maybe not completely functional since several of the ports are needed for legit traffic. But if you lock 135, 139, 445, and 593 inbound you should be safe.

With a more feature-laden firewall where you can controll outbound traffic as well, blocking ports 69 and 4444 will take care of things since the first piece of the infection simply sets up to have your PC use these ports to communicate with other infected machines to download files and complete the infection and the setup of TFTP. Absent that, it can't do it's thing.

 

Thank you. I am back on and its working !

 

Fabulous news chetdoug! Congratulations...and thanks so much for taking the time to post back.

 

Also here are insructions http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
To stay connected long enough to get the update go to Task Manager and end process on msblast.exe. it is in the registry also.

 

The link that maggie refers to the System Restore in ME and XP. That is fine.

Everyone ( well maybe not everyone ) seems to be forgetting that there are some of us still using a version of 98. And that 98 DOES make backups of the registry also. Or at least it should be if the user has not taken Scanregistry out of the stratup sequence.

I believe the RB00X.CAB files that 98 makes each day should be considered for deletion and rebuilding also after a cleanup.

Any clean up of any type. Not just a Virus.

After all the RB00X.CAB files ARE the registry in 98.

And recreating them is as easy as going to the C:\Windows\Sysbckup folder and deleting then and restarting Windows.

BillyBob

 

BB? Am I missing something? Although your advice is fabulous as always.... this is the XP forum....and this particular problem that's running rampant... doesn't include 98.

Do excuse me if I'm miss-reading. I'm beat after battling this one with everyone and their dog's favourite cousin.

Please........please people......do your critical updates and get a firewall. (sigh)

 

Good Morning Daizy

No you are not missing anything. And yes it is the XP forum.

But I am really only try to make a point about Microsoft and others that mention cleaning up after a Virus.

This case may relate to just XP. But many others do not. And I have seen many sites that do not even mention removing the backup files that 98 makes. Some mention various drive image files like GO Back etc. but no mention of the RB00x.CAB files in 98.

And unless I missed something the link maggie poined to did not even mention anything other than the restore points. I will submit this and take another look. If I do not come back and edit this post I will have read correctly.

And I know that there are other than just XP users reading this XP Forum.

Agree....Agree...Agree.......No matter which OS you are using.

BillyBob

PS.

I did get the patch before I even replied here the first time.

BB