Jump to content
Ghost Recon.net Forums

Recommended Posts

For some reason, for the past few minutes, after I get online, I get some wierd error box come up...it says "THE SYSTEM IS SHUTTING DOWN. PLEASE SAVE ALL WORK." then it says sthis shutdown was initiated by NT AUTHORITY\SYSTEM

then something about Windows must restart because the RPC service terminated.

Share this post


Link to post
Share on other sites

LMAO, Me too my friend, something with IE. Plus my internet is going alot slower then usual.

Maybe a terrorist attack on the internet. :wall:

Edited by NightCrawler

Share this post


Link to post
Share on other sites

RPC erros happen a lot with virii. But they can be fixed a lot of times just grab the latest updates for ur windows version.

Share this post


Link to post
Share on other sites

Im getting the same problem. It is a virus. It's called msblast. Ctrl + Alt + Delete and cancel the process. Now, open up the registry, and go to:

HKEY LOCAL MACHINE | SOFTWARE | MICROSOFT | Windows | CurrentVersion

Then, click on Run. The name will be in all lower case letters, and it's called msblast under Data. Delete it. Im running a virus scan now but picking up nothing. Stay tuned.

Edited by Crimson

Share this post


Link to post
Share on other sites

Sorry Major, I posted it but all my posts are under moderation so they take a crap load of time to get to you.:( Follow Crimsons advice there

Share this post


Link to post
Share on other sites

On a side question, what was the last mod you guys downloaded for Ghost Recon?

Share this post


Link to post
Share on other sites

FL-AVA last night.

edit...scanning now.

Edited by NightCrawler

Share this post


Link to post
Share on other sites

Found the p.o.s. It's in WINDOWS | system 32. It's called msblast. Delete it.

Share this post


Link to post
Share on other sites

Yep....been doing it to me for 2 days. Sigh. Windows strikes again.

I came up clean on the virus scan incidentally.

What is that msblast anyway? Anyone know?

Edit:

Looks like some kind of search something or other. Sigh. Does anyone know what it hitched a ride on to get into our systems?

Another edit:

Deleted that file. System shutting down on me again. Sigh.

Edited by SOTOPhantm

Share this post


Link to post
Share on other sites

I'll keep an eye open for it. So far, I haven't got hit.

*crosses fingers, and throws salt over shoulder*

Share this post


Link to post
Share on other sites

omg, I was just talking to Chems, he's got it, we where talking on MSN. He gave me a screen of the error box, he'll be so happy about this post, lol.

How has so many people got it at the same time?

Share this post


Link to post
Share on other sites
msblast is an X-windows interface utility to do BLASTing on multiple sequences. This program uses network BLAST programs.

msblast program was developed and produced by Rao Parasa and John Powell of CIT at NIH.

Msblast seems to have beneficial uses too...are you sure it is the problem?

Share this post


Link to post
Share on other sites

I'm not thats why I haven't done anything yet. Waiting for something a bit more concrete.

Share this post


Link to post
Share on other sites

I have deleted this 3 times, and it is still re-adding itself and shutting down the system.

The only thing that has changed is I upgraded to MSNIM 6. Did it piggy back in on that?

It doesnt go away, and it re-adds itself.

Share this post


Link to post
Share on other sites

Read This!

When W32.Blaster.Worm is executed, it will do the following:

Adds the value:

"windows auto update"="msblast.exe"

to the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

so that the worm runs when you start Windows.

Send data on TCP port 135 that may exploit the DCOM RPC vulnerabilty to allow the following actions to occur on vulnerable machine:

the worm to be download and run using the program tftp.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×