Results 1 to 11 of 11

Thread: What is this virus?

  1. Aug 14th, 2003, 03:20 AM #1
    sbasak
    sbasak is offline

    Thread Starter
    Fanatic Member sbasak's Avatar
    Join Date
    Aug 2001
    Location
    Globe Trotter
    Posts
    524

    Unhappy What is this virus?

    I faced a strange problem. After connecting with internet with my laptop [not connected to any network - plain personal computer], in a few moment, I receive a message saying "Your computer will be shut down in 0:60 min. RPC (Remote Procedure Call) error. Close all applications." And the machine restarts itself. After scanning the drive with AVG Antivirus, I found that VBS/Redlof is present. AVG couldn't heal the virus, but removed the infected file to a different location with renaming it.

    However, even after that I faced same problem!! When the closing dialog box appears, I tried to close it from Windows (XP Home) task manager, even though I can see the application, I couldn't kill it.

    Is it due to same virus or some other virus??

    Please help...

    PS: I also tried to remove any setting from Registry which runs any program automatically eg. HKLM, HKU/ Microsoft/Windows/CurrentVersion/Run, RunOnce etc.
    Last edited by sbasak; Aug 14th, 2003 at 03:33 AM.
    Life is a one way journey, not a destination. Travel it with a smile and never regret anything.
    Yesterday is history, tomorrow is a mystery, today is gift - that's why we call it present.
    Reply With Quote Reply With Quote
  2. Aug 14th, 2003, 04:22 AM #2
    sbasak
    sbasak is offline

    Thread Starter
    Fanatic Member sbasak's Avatar
    Join Date
    Aug 2001
    Location
    Globe Trotter
    Posts
    524
    I think it is msblast

    http://www.startribune.com/stories/389/4038065.html
    Life is a one way journey, not a destination. Travel it with a smile and never regret anything.
    Yesterday is history, tomorrow is a mystery, today is gift - that's why we call it present.
    Reply With Quote Reply With Quote
  3. Aug 14th, 2003, 04:59 AM #3
    Algar
    Algar is offline
    Lively Member Algar's Avatar
    Join Date
    Jun 2003
    Location
    A place that never existed
    Posts
    127
    It sure is, and your ****ed.
    www.hotvbforum.com for some great VB and C++ forums!
    Reply With Quote Reply With Quote
  4. Aug 14th, 2003, 05:12 AM #4
    Sgt-Peppa
    Sgt-Peppa is offline
    Hyperactive Member Sgt-Peppa's Avatar
    Join Date
    Mar 2003
    Location
    Munich - Germany
    Posts
    476
    You can download a removal tool here:

    http://www.symantec.com/

    Stephan
    Keep Smiling - even if its hard
    Frankie Says Relax, wossname Says Yeah!
    wossname:--Currently I'm wearing a gimp suit and a parachute.
    C# - Base64 Blog
    Reply With Quote Reply With Quote
  6. Aug 14th, 2003, 07:53 AM #5
    Cander
    Cander is offline
    Banished Cander's Avatar
    Join Date
    Dec 2000
    Location
    Why do you care?
    Posts
    6,913
    You have been hax0red!
    Im so glad I am firewalled at home.
    Stack Overflow
    See the features of Visual Studio 2010 and C# 4.0: The 10-4 show on Channel9
    Reply With Quote Reply With Quote
  7. Aug 14th, 2003, 09:16 AM #6
    DaveBo
    DaveBo is offline
    Hyperactive Member
    Join Date
    Apr 2001
    Location
    N42 29.340 W71 53.215
    Posts
    422

    Microsoft info and patch

    Microsoft Security Bulletin MS03-026
    http://www.microsoft.com/technet/tre...n/MS03-026.asp
    "The wise man doesn't know all the answers, but he knows where to find them."
    VBForums is one place, but for the really important stuff ... here's a clue 1Tim3:15
    Reply With Quote Reply With Quote
  8. Aug 14th, 2003, 10:58 AM #7
    sbasak
    sbasak is offline

    Thread Starter
    Fanatic Member sbasak's Avatar
    Join Date
    Aug 2001
    Location
    Globe Trotter
    Posts
    524
    Which is a good personal firewall? Is ZoneAlarm free good?
    Life is a one way journey, not a destination. Travel it with a smile and never regret anything.
    Yesterday is history, tomorrow is a mystery, today is gift - that's why we call it present.
    Reply With Quote Reply With Quote
  9. Aug 14th, 2003, 12:26 PM #8
    DiGiTaIErRoR
    DiGiTaIErRoR is offline
    So Unbanned DiGiTaIErRoR's Avatar
    Join Date
    Apr 1999
    Location
    /dev/null
    Posts
    4,111

    Re: What is this virus?

    Originally posted by sbasak
    I faced a strange problem. After connecting with internet with my laptop [not connected to any network - plain personal computer], in a few moment, I receive a message saying "Your computer will be shut down in 0:60 min. RPC (Remote Procedure Call) error. Close all applications." And the machine restarts itself. After scanning the drive with AVG Antivirus, I found that VBS/Redlof is present. AVG couldn't heal the virus, but removed the infected file to a different location with renaming it.

    However, even after that I faced same problem!! When the closing dialog box appears, I tried to close it from Windows (XP Home) task manager, even though I can see the application, I couldn't kill it.

    Is it due to same virus or some other virus??

    Please help...

    PS: I also tried to remove any setting from Registry which runs any program automatically eg. HKLM, HKU/ Microsoft/Windows/CurrentVersion/Run, RunOnce etc.
    It's caused by a worm, exploiting the RPC protocol.

    If you don't have a window's password(or a simple one), you'll also be vunerable to people getting administrative privleges on your box.
    Reply With Quote Reply With Quote
  11. Aug 14th, 2003, 04:15 PM #9
    abhijit
    abhijit is offline
    PowerPoster abhijit's Avatar
    Join Date
    Jun 1999
    Location
    Chit Chat Forum.
    Posts
    3,228

    Unhappy got the very same problem

    I got this very same problem.
    So what is the cure for it? My PC keeps on rebooting after connecting to the internet after every 5 - 10 minutes. I guess its infected, but my Anti-Virus is really really old.

    How did you fix your problem?

    Cheers!
    Abhijit
    Everything that has a computer in will fail. Everything in your life, from a watch to a car to, you know, a radio, to an iPhone, it will fail if it has a computer in it. They should kill the people who made those things.- 'Woz'
    save a blobFileStreamDataTable To Text Filemy blog
    Reply With Quote Reply With Quote
  12. Aug 14th, 2003, 11:52 PM #10
    Kasracer
    Kasracer is offline
    KrisSiegel.com Kasracer's Avatar
    Join Date
    Jul 2003
    Location
    USA, Maryland
    Posts
    4,985
    Start>run Type in "services.msc"

    Go down to RPC (The abbreviation will be in parenthasies)

    Double click, go to recovery and select take no action in the 3 drop down boxes, hit apply.

    Now you can fix it without being shut down.

    ALso you can go into command prompt and type in "shutdown -a" which will abort the shutdown.

    This exploit has been out for about a year, Microsoft patched it early June but so many people are getting hit, this should be a wakeup call to everyone.... PATCH YOUR OPERATING SYSTEM
    Reply With Quote Reply With Quote
  13. Aug 17th, 2003, 11:47 PM #11
    abhijit
    abhijit is offline
    PowerPoster abhijit's Avatar
    Join Date
    Jun 1999
    Location
    Chit Chat Forum.
    Posts
    3,228

    Post

    Thanks for your help guys. I patched up my PC. Its all okay now.

    Abhijit
    Everything that has a computer in will fail. Everything in your life, from a watch to a car to, you know, a radio, to an iPhone, it will fail if it has a computer in it. They should kill the people who made those things.- 'Woz'
    save a blobFileStreamDataTable To Text Filemy blog
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules


Click Here to Expand Forum to Full Width