[OT] Info on pseudo-BLaster worm or variant?

[Ed Kolis]

I'm getting the forced shutdowns too; how DO you stop them? sorry I'd explain more but I have 15 sec levt!!!!

edit: OK, the system rebooted and I'm back... fortunately this hasn't happened too far into any pbw turns!

What I meant to ask is, how do you disable the "shutdown on RPC error"?

More info that might help... I scanned my system with a free virus scanner (AntiVir Free Edition) and it found LoveSan or some such virus; it said the file c:\windows\system\msrc.exe or somesuch (maybe it was system32, or msfc) was infected, and I did find a registry entry (using FreshDiagnose) that was loading that file on startup - dunno if it's a real Microsoft file or not, but I deleted the entry and it hasn't made things any worse. I did recently reformat my c: partition because I was having other troubles which seemed to be a virus, but either I got reinfected Online or from my other partition where I kept most of my data and applications. (Maybe I need more partitions so I can eliminate them one by one instead of all the data/apps/games/etc. all at once... but then it's a pain to resize them when they've already got data... )

[ January 20, 2004, 02:32: Message edited by: Ed Kolis ]