If your having the shutdown problem regarding the RPC, this is a temporary fix. 1. Go to control panel 2. Administrative tools 3. Services 4. Go down and double click Remote Procedure Call 5. go to recovery, third tab. 6. Change all the failure to just ignore instead of restarting computer. note: THis is only a temporary fix, you won't be able to preform some basic functions with the computer like this, but at least it won't shut down.
Here's a link to the remover tool from Symantec. countingcrow, quit counting your crows and try it : http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
I've heard bad stuff about this removal tool, it hasn't been working. Maybe they fixed it...? Try Sophos, I've been told it works. Also the Trend tool works. On the Sophos link I posted goto #2 and download the removal tool.
I just bought McAfee for a year (I didn't have any anti-virus software...I know I am stupid!) and I ran a scan. It deleted the bug for me.
According to Symantec, only Windows 2000 and XP machines are affected by this. I'm unsure how accurate that is. Also, I'd defer to Sonny if he says that Symantec fix for the problem causes problems. He's having to fight the thing at work since he works in a support role. I'm just a guy at home surfin' the 'Net.
When I first got my laptop I was pissed that it came with Millenium because it's a tweener basically between 98/2000 but it's a good thing now because a lot of these viruses that are written don't seem to bother Millenium. How sweet it is!
I work for EV1, and u just dont know how much we were SLAMMED yesterday with calls about this virus plus the fact that some of our servers went out went the stormed hit Houston at about 230pm. Our que usually averages AT MOST 20 calls on hold. From about 3pm till when I left at 10pm, our que only went under 20 calls for about 20 mins, then was at a constant 50 or more calls till I left, it even hit 99 calls at one time, pretty ridicolous if you ask me. Thanks God I am off till Saturday.
I really think I screwed something up doing this. Now Windows will not even start on my machine and nothing is running and I can't even get the help boxes or Norton to start up. I went back through thses steps, and now it says RPC won't run because it is disabled or other processes with it are disabled. I can't even do a restore, as it keeps telling me to restart as restore won't undo anything on my PC. Ugh! Figures this would happen the week of fantasy football drafts! Anyone know how to get my processes running again? I have a full screen of shortcuts, but NOTHING is running.
Sorry if it screwed you up. I was given those instructions by Dell technicians when fixing a friend's computer. Doing that only allowed the computer to stay on long enough to get rid of the problem (downloading whatever fix neccessary). I will ask around to see how to fix this, and reply as soon as possible. Once again, sorry if the instruction screwed you up.
Hey LonghornFan. You said you can't even get Windows to start, but then you said none of your shortcuts work. So are you in Windows at the desktop and can see the icons on your desktop? Oh yeah, and what version of WinBlowz are you using?
Are you able to get to the <i>Task Manager</i>? You might have processes running and are unaware of them. <hr color=red> Edit: If you want to read some more OS misery: <a HREF="http://forums.techguy.org/forumdisplay.php?forumid=21">Tech Support Guy: Windows NT/2000/XP Forum</a>
SaFe, don't worry about a thing. Seems I did this all on my own. DD- I'm running XP, and I'm able to load my home page with my desktop icons after what seems like an eternity, but I am unable to access anything. I can't search, open any folders or files, and nothing is running. Here a re a few errors I get when starting up my PC: -The procedure entry point could not be located in the dynamic link library KERNEL32.dll. -Error in NvQTwk Missing Entry: NVCplDaemon -This file, which I'm unable to open, pops up; File TFTP1776 When I try system restore a box pops up reading: System restore in not able to protect your computer. Please restart your computer and then run system restore again. I did that, with the same results as the first try. Like I said, there is nothing running on my PC, as I can't even here the modem. I also tried run-System Config/Utility/Services/enable...everything says enabled, but stopped. I right click on RPC and nothing happens. I've never had one problem with this computer until this virus hit me. We've found different TFTP files attached to different programs/folders but I can't seem to delete them since nothing on my PC is running. I need some computer jumper cables desperately.
I'm almost scared to give advice when I can't be there to see what's going on, but I figure you can't screw up your system any worse, so ... 1) Hit the Start button in Windows XP 2) Select Run from the menu 3) In the space provided type the following : regedit 4) Press the "OK" button on that window. You should see an application called "Registry Editor" fire up. It should be split into two panes. The left half or pane has a bunch of folders you can collapse and expand. 5) Find the folder named "HKEY_LOCAL_MACHINE" and expand it. 6) Underneath that folder find a folder named "SYSTEM" and expand it. 7) Underneath that folder find a folder named "CurrentControlSet" and expand it. 8) Underneath that folder find a folder named "Services" and expand it. 9) Underneath that folder find a folder named "RpcSs" and and just left-click on it (you don't have to expand it, just click it with the left mouse button). On the right half of the window you'll see a bunch of values in 3 columns. The column names should be "Name", "Type", and "Data". 10) In the "Name" column find a value that says "Start". 11) Now go over to the "Data" column for that "Start" row and tell me what the value says. Does it say this? : 0x00000002 (2) My guess is not... if it does say that, then I've got no idea... lol. Let me know what you find out.
Ok, I have the drive in the office next door and just did everything you said. The number value is 0x00000002 (2) Is this a bad thing?
Yeah, I was hoping it would say something other than 2. So I suppose it's a bad thing. We could have fixed it. But since it seems to be what it's supposed to be, I'm out of ideas at the moment...
Thanks for trying to help out. Looks like I'm going to have to reformat, lose everything on my PC and start from the beginning.
