pc keeps shutting down every 60 seconds

  • Thread starter Thread starter ak
  • Start date Start date
A

ak

Hi
a friend of mine has recently removed the blaster worm
now whenever she goes online a warning window comes up and the system
reboots after 60 seconds
when not online this does not happen.
any suggestions please

ps she uses norton av2002
 
Hi,
a friend of mine has recently removed the blaster worm
now whenever she goes online a warning window comes up and the system
reboots after 60 seconds
when not online this does not happen.
any suggestions please

ps she uses norton av2002
Click to expand...
It sounds like your friend is still infected. Are the Norton virus
definitions up to date?

I've not read much good stuff about Norton over the years, so my
suggestion would be for your friend to uninstall it and replace it
with a more highly regarded AV product, once she's cleaned up any
current infection. Kaspersky, NOD32 and F-Prot for DOS seem to do well
in independent tests. Then she needs to keep the virus definition
files up to date (NOD32 does this automatically for me), and install
(and keep up to date) a reliable firewall.

Best wishes,
 
Hi,
a friend of mine has recently removed the blaster worm
now whenever she goes online a warning window comes up and the system
reboots after 60 seconds
Click to expand...

Let me guess: The warning window tells about a problem with the RPC
service?

Sounds to me that your friend removed blaster but did not install the
necessary patch - thus she keeps getting attacked by the lil' bitch. I
never experienced it myself (the only machine here visible from the
internet is a non-M$ server and therefore invulnerable to blaster ;) )
but as far as I know this is exactly what happens when blaster infects
a machine. The RPC service gets shut down forcefully, windoze XP does
not like this and shuts down the system within 60 seconds.
Of course, if she definitely positively installed the patch I don't
know (at once) what it might be.
Note that blaster (mostly) does NOT spread via email but attacks
vulnerable RPC services, so her AV program will be useless against THAT
kind of attack. A firewall configured to block RPC access from the
internet should do the trick, though.
 
ak said:
Hi
a friend of mine has recently removed the blaster worm
now whenever she goes online a warning window comes up and the system
reboots after 60 seconds
when not online this does not happen.
any suggestions please
Click to expand...

She needs to patch the vulnerability that that worm uses
as well as just remove the instance she was previously
affectd by.

I think the patch is relative to MS03-039.
 
Watcha!

If your friend is getting a NT/AUTHORITY dialog box saying that the PC will
shut down in x seconds, then he/she actually has the Welchia virus/worm.
The Welchia virus actually deletes the Blaster virus (helpful eh! NOT).

Anyway, it exploits the same hole that Blaster does - go on to this web page
to download the fix and to find out how to do it....

http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

Hope this helps

Jonathan Burrows
 
Back
Top