help.. major problem..

bobins · Posted: Wed Aug 20, 2003 6:30 pm Post subject:

hmmm rite... pete your even
weirder on here than in person..

well i rebooted.. n that solved the problem where everythin was being displayed upside down.. but now i've got another problem.. n its pi$$in me off..

n i'll include a pic this time for you disbelievers

well anyway.. windows keeps shutting itself down. and its anoying me so dam much. if i cant sort it soon im takin my comp back n askin wtf..

TIA

[Edit: oopsy sorry its a bit big.. will make it smaller when i got time.}
_________________

Azrael · Posted: Wed Aug 20, 2003 6:52 pm Post subject:

Dude, it seriously sounds like you got a virus. I had this one program I put on my bosses comp that basically turned his screen upside down. You could shut it off if you knew where to look, but he was dumb and didn't know where to look. Your's sounds just a wee bit worse, a bit more malicious, and I'm just making a guess.
_________________
Under construction!!!

bobins · Posted: Wed Aug 20, 2003 7:00 pm Post subject:

if it was a virus it managed to get rite past norton profesional 2003.. n when my screen did start goin upside down.. i ran nortonagain and nothin..

crap.. i hope not.. brand new comp..

i'll have to go lookin around for newly discovered viruses n c if i can get a cleanin thingy for it.

crap.. crap crap. just my luck. lol.

well im on my old comp at the moment.. but im really not gonna be happy if thas the case.. well thanks for the input..

when my screen first started bein upside down i thought o crap virus.. but there we go.

if any one else knows anythin plz post. thanks.
_________________

Mr.Kason Allen · Posted: Wed Aug 20, 2003 7:07 pm Post subject:

Squirrels!!!!!! NOOOOO RUN RAGGGY RUN FOR YOUR PRIDE RUN FOR YOuR FREEDOM BUT MOST OF ALL RUN FOR YOUR MANHOOD!!!!!

_________________
Over your dead body!

DarkScythe · Registered User Joined: 03 Feb 2003 Posts: 53

bobs, do u have a firewall?

cuz from that screenshot..

It is the msblaster worm.

Firstly, disconnect from the net and check.

go to task manager and see if u have msblaster.exe or penis32.exe running.

If it is, u have been infected. If it's not, then don't worry, it was just a side effect of someone else who ahd it and is trying to get to u.

If u don't have it, put up a firewall or check the various virus sites to prevent it.

If you do have it, u need to go to the norton site, they have a fix for it.

1) end that task msblaster.exe or penis32.exe
2) go to your C:\Windows\System folder, find that exe file and delete it
3) run norton, scan ur HD for any other file infected with it and delete it

Hope that helps

EDIT:
NOTE: after you're done either cleaning it or putting up a firewall (remember to block traffic in TCP ports 135 and 4444 and UDP port 69) go to the microsoft site to download the patch that patches the security hole the worm exploits in the RPC.

Remember to unblock those ports when ur done i think.. up to u on that

Also, if the RPC shuts down on u too fast, there is a way to stop it temporarily.

go to Run > Services.msc
Go down to Remote Procedure Call (NOT THE LOCATOR)
Go to properties and hit instead of restart computer, change it to restart service.

Remember to change it back when ur done.

cheers

_________________
-= DarkRogue =-
Master of Darkness
Commander of the Shadows
Harbinger of Death
The Rogue of Darkness shall be your Demise!

Twisted29 · Posted: Wed Aug 20, 2003 7:13 pm Post subject:

Blue Ruler · Posted: Wed Aug 20, 2003 7:19 pm Post subject:

If I remember correctly Norton only scans for a virus NOT a worm. You may want to try www.antivirus.com or another free scan site.
Have you run spybot yet.
_________________

bobins · Posted: Wed Aug 20, 2003 7:20 pm Post subject:

i did have both firewall and virus scanner.. but i did notice that after i had the upside down screen that the firewall and virus scanner would turn off.. idk waht caused it.. it must be a virus.. i'll run upstairs n check on my comp now n c what i comes up wiv. ta for the help.. i hope to god it works.. lol.
_________________

Simpleman · Posted: Wed Aug 20, 2003 7:31 pm Post subject:

You can try http://us.mcafee.com/root/mfs/default.asp

bobins · Posted: Wed Aug 20, 2003 7:43 pm Post subject:

cobra · Posted: Wed Aug 20, 2003 8:30 pm Post subject:

this is a scan special for MSblasterworm. it will only scan for that particular worm and remove it.

http://securityresponse.symantec.com/avcenter/FixBlast.exe
_________________
PROUD TO BE A MEMBER OF =US-V= & VILLE $UPPORTER

_-=Did It Hurt=-_ · Posted: Wed Aug 20, 2003 8:37 pm Post subject:

After all that update your norton with the live update button at the top of the systemworks window.
_________________

Cool Sig by KRG. Thx

The Proud, the Few, US-V or The Ville Supporters (V$)!!

YourPowersAreWeakOldMan · Posted: Wed Aug 20, 2003 8:39 pm Post subject:

Haw haw, he r having lovesan msblast werm....

did yoo all-sew chek to maak shur yoo dont haav a butfour on yoor compeewtor???
_________________
World of Warcraft:
Bleeding Hollow PVP Server as Mortibund (undead mage)

bobins · Posted: Wed Aug 20, 2003 8:42 pm Post subject:

yeee haaa.. its all gone n my comps stoped shuttin itself down.. few.. lol

thanks for all the help ppl. much apreciated..

_________________

DarkScythe · Registered User Joined: 03 Feb 2003 Posts: 53

no problem, my brother's comp had that worm a few days ago so I still remembered how to fix it and its obvious symptom

_________________
-= DarkRogue =-
Master of Darkness
Commander of the Shadows
Harbinger of Death
The Rogue of Darkness shall be your Demise!