XP/Internet problems

[.Mark]

Helpdesk,
We have a Dell laptop running windows XP and yesterday I set up my broadand account on it. Everything logs in fine internet come up very fast as you would expect, however, after about 1 minute I get the following error message (or words similar)and the machine reboots:-

Windows must now restart initiated by NT AuthoritySystem
Because RPC terminated unexpectedly.

Any ideas folks?

[Plotloss]

Got a virus checker?

Could be W32/Lovesan (MSBlast Worm, RPC Worm)

[.Mark]

Yes, Norton Corporate edition.
It only happens when on the internet though working off line seems to be OK.
I'll run the virus check anyway though.

Cheers.

[Plotloss]

Thats one of its features I believe, it only starts playing up when theres a web connection.

I had a quick google and there were about 10 responses all about Blast regarding this problem...

[tuffer]

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

[GregE240]

Mark,

You need to go to Windows Update and download/install the Blaster fix.

Also, run up a CMD prompt and type in (without quotes "shutdown -a" but don't press Enter). This will abort any attempted shutdown of the machine.

>> Edited by GregE240 on Monday 6th October 09:35

[meeja]

Plotloss said:

Could be W32/Lovesan (MSBlast Worm, RPC Worm)

[Podie]

GregE240 said:

Mark, You need to go to Windows Update and download/install the Blaster fix. Also, run up a CMD prompt and type in (without quotes "shutdown -a" but don't press Enter). This will abort any attempted shutdown of the machine. >> Edited by GregE240 on Monday 6th October 09:35

Don't forget to do a full system scan afterwards..

[GregE240]

I thought one of these (Symantec download rings a bell) did this anyway?

[Podie]

GregE240 said:

I thought one of these (Symantec download rings a bell) did this anyway?

Not sure actually. I tend to use McAfee...

[.Mark]

Cheers guys, it turns out to be the Welchia virus which I have knocked on the head by downloading the fix on to another machine and copying it over etc.

Thing is I can't now check to see if it has cured the problem as the machine will not now dial up it says the remote server is not responding, but, using the same modem on my other laptop I get straight in. I have tried deleting all the connections and building a new one but still no joy. Will come back to it a bit later and try again, before the percussive maintenance starts.

Interesting though how a reletively brand new laptop with software preloaded can be hit with a virus within seconds of being connected to the internet - and I was using the firewall that comes with XP.

[Podie]

.Mark said:

... the firewall that comes with XP.

It's

You need a proper one... ESPECIALLY if you're on broadband.

[jeremyc]

.Mark said:

Interesting though how a reletively brand new laptop with software preloaded can be hit with a virus within seconds of being connected to the internet - and I was using the firewall that comes with XP.

I had exactly the same problems yesterday with my new laptop. Hooked up to the internet to download the latest patches for XP and virus definitions, but can't complete the process because the virus fks everything up.

Oh and I've now got a teekids.exe file quarantined because Norton AV has detected it but can't get rid of it....

Hey-ho, dontcha just love Micro$oft.

>> Edited by jeremyc on Monday 6th October 11:27

[.Mark]

It's a pain Jeremy, luckily I had a quick enough connection that I could download the latest definition file and get it installed before the laptop started to shutdown.

Now all I have to do is the the bloody thing to connect again!