I have installed Net nanny /chat monitor on my computer . Now it will reboot every two to three minutes Windows is restarting because it was initiated by "NT AUTHORITY\SYSTEM mESSAGE: . . . . . Remote procedure call(RPC) terminated un expectedly
what i forgot to mention is that it does not finish booting up before that message appears. . . the icons on my desktop appear but not the task bar on the bottom. . . if only i new the HKEY # icould locate it and delete so that the program would disable it self
Ok, you should'be said that. Try and boot into safe mode with networking: http://support.gateway.com/s/SOFTWARE/MICROSOF/7509594/FAQ2/750959415.shtml Download and install "Fix Blast" http://securityresponse.symantec.com/avcenter/FixBlast.exe Once installed run the tool, run FixBlast.exe and click start,it should remove it if you've done it in safe mode. Aslo, download and install Microsoft's patcc to precent it happening aggain: http://www.microsoft.com/downloads/...6c-c5b6-44ac-9532-3de40f69c074&displaylang=en Restart and run the tool aggain to ensure its clean (in normal mode this time) If theres still forced shutdown in normal mode (unlikely though) theres a way to stop it. # From the Start menu, click Run. # In the Run dialog box, type: shutdown -a. Click OK Let us know how it goes.
thank you will try when i get home .. as you can see today monday(at work) i can reply until i get to work. . . Thanks CHICO_PR
No problem, I should mention to stop forced shutdown enter shutdown-a into the run menu and hit ok. Keep us posted, thats a nasty worm you have..
Well i was able to temperally stop the shut down 'shutdown -a. I ran the 'fix blast' the scan determaned that there was none. then i tried to reinstall the patch for it'microsoft', but i was not successful , >> message: you are unable to install patch because of more recent one (service pack 2 ) already installed. The shutdown -a , did stop the rebooting temp, but i still do not have a task bar. . is there anything out there that could disable the 'RPC' remote procedure call, or if someone could find away to disable the netnany so it would not try to start when windows is booting.>>>> HKEY. . .if deleted could this disable it?. <<<. so many questions. I'm just giving ideas, so that you may help me in my stress out issues with PC. .
You can disable netnanny by going start > run > msconfig, click on start up and disable the netnanny entry. I think the patch may be included if you have SP2, try this, this will allow you to connect to the internet without forced shutdown's. 1. Right-click the My Computer icon on the Windows desktop or in the Start menu. 2. Select Manage. The Computer Management window will open. 3. In the left pane, double-click on Services and Applications. 4. Select Services and a list of services should appear. 5. In the right pane, locate the Remote Procedure Call (RPC) service, it will have a Status of "Started". Note: This will be the first in a listing of two Remote Procedure Call (RPS) services. 6. Right-click on the first Remote Procedure Call (RPC) service listed. 7. Select Properties. 8. Select the Recovery tab. 9. Using the drop-down lists, change First failure, Second failure, and Subsequent failures from Restart the Computer to Take No Action. 10. Click on Apply and then OK. CAUTION: Make sure that you change these settings back after completing the final step to remove the worm. Once you've applied that run a window's update: http://www.windowsupdate.microsoft.com/ Your infected with the W32.Blaster.Worm, you must be sure that you've got all the latest patches from microsoft. Now, run the fix blast tool aggain (in normal mode), give it time. http://securityresponse.symantec.com/avcenter/FixBlast.exe It's the b@s**rd W32.Blaster you've got, we'll help you remove it
