|
Weird, I read your post earlier and wasn't able to respond (short of googling the 'net, which you claim to have done), and lo and behold my ISP just sent out an email about Win32.Blaster.Worm, which more info at http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html
. Hope that helps!
-----BEGIN GEEK CODE BLOCK-----
Version: 3.21
GCS/G/MU d- s: a- C++++ UL@ P++(+++) L+(--) E--- W+++ N++ o+ K? w++++ O- M(+) V? PS-- PE Y++ PGP++ t++@ 5 X+++ R+@ tv+ b(-)>b++ DI++++ D+ G e++>+++ h---* r+++ y+++
-----END GEEK CODE BLOCK-----
|
|
|
|
|
I think that's it !! Now I wonder how it got onto my PC ??
To fix it so far, I yanked my USB PCI card & re-installed from ghost images. Maybe the USB PCI install did something funny.....
Thanks again !!
|
|
|
|
|
This is a worm, so either it was in the driver software (VERY unlikely) or it came through something attached to the USB hub, like a USB NIC. Do you have something like that? This is a problem especially if you're on an ISP such as DSL or cable modem where a great majority of the users shouldn't even own a computer and are wide open for attack.
-----BEGIN GEEK CODE BLOCK-----
Version: 3.21
GCS/G/MU d- s: a- C++++ UL@ P++(+++) L+(--) E--- W+++ N++ o+ K? w++++ O- M(+) V? PS-- PE Y++ PGP++ t++@ 5 X+++ R+@ tv+ b(-)>b++ DI++++ D+ G e++>+++ h---* r+++ y+++
-----END GEEK CODE BLOCK-----
|
|
|
|
|
I am also having the same problem. Did u manage to solve it? I tried deleting those files related to msblast and i am awaiting to see if the problem is still there.
Weiye, Chen
When pursuing your dreams, don't forget to enjoy your life...
|
|
|
|
|
It is a worm. See Heath Stewart's post above, and the "Port 135" thread in the lounge.
"Blessed are the peacemakers, for they shall be called sons of God." - Jesus
"You must be the change you wish to see in the world." - Mahatma Gandhi
|
|
|
|
|
deleting the files did not work for me, I had to then "re-register" my PC at microsoft-central....
definitely causes my Windows XP Pro to crash tho, here's some links I got from my ISP & microsoft
//securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html
//www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp
I downloaded the security fix for this RPC bug & will try it shortly, only about 1.3mb size
and it doesn't seem to zap my NT4 SP5 system, which I'm using now & for some reason CP doesn't have the clickety links for IE4.0 ??
|
|
|
|
|
Hmm, my dads computer started doing this a few days ago. I would have never guessed it. I'm searching the HD for msblast. But its weird I am having problems with it reading a the Windows CD, could be virus and coincidental hardware failure
Matt Newman
Sonork: 100:11179
"Whoa, that ruled! What function key do I gotta press to get that to happen again?" - Strong Bad
|
|
|
|
|
greghop wrote:
and some DBL file
greghop wrote:
and then rebooting WXP asked me to "register" my OS because it changed
Was it WPA.DBL? This file stores your WinXP Activation Data. Delete this file and windows needs to be reactivated.
|
|
|
|
|
Hi,
I had a problem with Crystal Report version 8.5. The report was not able to export to PDF. While trying to look in to that problem I encountered some strange registry entries. The Paths are written with ? instead of :(e.g. D?\WINNT\System32\mscomctl.ocx). I can see a lot of entries like this especially under HKCU\Software\Microsoft\Windows\Current Version\Installer\Components. Why it is so? Any help will be appreciated.
|
|
|
|
|
I have a strange problem (aren't they all, before they're figured out?  ). I just clean-installed a box here with Win2kPro, and on booting up I checked to see if it got the correct IP from the router's DHCP. It hadn't. It had [edit] 169.254.55.209 (rather stupid of me, forgot to include that while writing my message  )[/edit], instead of the usual 192.168.1.2 internal address. I reinstalled the connection, protocols, everything I could think of, but nothing helped. Then out of desperation I tried disabling the LAN connection, then immediately re-enabled it. It worked, it had the right IP, default gateway, everything! So I thought my problems were solved... I restarted, checked the IP, and it was back to what it was!  I did the re-enabling rigmarole, and it picked up the right IP. It does this consistently each time I reboot. Any ideas? All welcome 
[edit] I just installed SP4, and it still does the same thing  [/edit]
Paul 
Garfield.Bark();<br />
---Configuration: garfield - Win32 Deworm---<br />
C:\garfield.cpp(9) : error C2039: 'Bark' : is not a member of 'CCat'<br />
modified 18-Jul-18 11:59am.
|
|
|
|
|
Hey Paul-
That is a puzzling problem, and i don't know how well this will help you, but here's a start. I know that when windows cannot find a DHCP server, and it's set to detect the IP automatically, windows sets the IP address to be in the range of 169.254.*.* (on my machine, Win2KPro as well, i ran a test where it set my IP to 169.254.66.67 when it couldn't find a DHCP server).
So, based on everything you've said, it sounds like the machine isn't trying to do a DHCP lookup once the PC starts. Check that the DHCP Client service is set to startup as soon as the PC loads. Beyond that, check with your DHCP router that it is receiving a request from the client PC. Hope this has helped some.
-Daniel
D Daniel Larsen, Professional Casanova
Blood, Sweat, Toil and Tears
|
|
|
|
|
Thanks for the response!
I'll try your suggestions out and get back to you 
Paul
Garfield.Bark();<br />
---Configuration: garfield - Win32 Deworm---<br />
C:\garfield.cpp(9) : error C2039: 'Bark' : is not a member of 'CCat'<br />
modified 18-Jul-18 11:59am.
|
|
|
|
|
|
Paul-
I'm glad everything's working fine now Did you ever figure out what the problem was, or was it simply a NFI (network fixed itself)?
-Daniel
D Daniel Larsen, Professional Casanova
Blood, Sweat, Toil and Tears
|
|
|
|
|
I don't think it was totally an NFI, because I'm pretty sure the computer was at fault, not the router. But it might have been an incompatibility of Win2k with the NIC (it is an el cheapo $14 NIC), that XP seems not to mind. I still don't know why though. The reason I feel the computer was at fault is before disabling/enabling the network *nothing* worked, not pinging, or anything. It just seemed to wake up after being re-enabled. Oh well, it works now
Paul
Garfield.Bark();<br />
---Configuration: garfield - Win32 Deworm---<br />
C:\garfield.cpp(9) : error C2039: 'Bark' : is not a member of 'CCat'<br />
modified 18-Jul-18 11:59am.
|
|
|
|
|
To start off I have no experience in RAID, but I am building a new server that has a built in raid controller. My first question is, can I set up a mirrored raid on a single HD and add a second one later? My second question is. Should I set it up to install the OS on a mirrored raid. Or should I set up the server storage (files etc) on a raid and install the OS on a single drive? The server storage is something I plan to add later.
Matt Newman
Sonork: 100:11179
"Jokes should at least try to be intelligent - this is just toilet humor" - Heath Stewart
|
|
|
|
|
The primary purpose of RAID is to protect your data in the event of a hard disk failure; even if possible, it would be pointless to set it up on a single drive. Save your pennies and buy extra drives, then do it right.
As to the system setup, I recall reading tales of woe from people who had trouble booting Windows from RAID sets. I'd install the OS on a single drive, and everything else on a RAID set, then schedule backups of the OS drive to the RAID set nightly.
"Welcome to Arizona!
Drive Nice - We're Armed..."
- Proposed Sign at CA/AZ Border
|
|
|
|
|
Roger Wright wrote:
As to the system setup, I recall reading tales of woe from people who had trouble booting Windows from RAID sets.
Hmm, I'm not a fan of un-neccesary work. So I'll boot off of a single drive.
Thanks for the tips!
Matt Newman
Sonork: 100:11179
"Whoa, that ruled! What function key do I gotta press to get that to happen again?" - Strong Bad
|
|
|
|
|
I still have to test this piece-o-junk antiquated operating system. But here's my problem. I can reproduce a scenario that brings NT to its knees. When you reboot, the Windows Login process quits unexpectedly and causes a bluescreen. IF you reboot, you get a blue screen. I cannot figure out a way to get into this machine to see what's going on.
I have tried booting in VGA mode, but it still causes the same problem.
Any ideas? My next step will be to try and use a recovery disk, we'll see how that goes. It might not get me the information I need - I am not so much interested in *fixing* this machine, as I am interested in what is causing it to crash in the first place.
Thanks.
"When a man sits with a pretty girl for an hour, it seems like a minute. But let him sit on a hot stove for a minute and it's longer than any hour. That's relativity." - Albert Einstein
|
|
|
|
|
Navin wrote:
I still have to test this piece-o-junk antiquated operating system
Funny, as with all M$ products it was advertised as the OS to end all OS's when it was released, just like 95!
There have been problems with some of the recent hotfixes, mainly to do with RAS and in my case dual boot failing. Or your problem "might" be to do with a hardware failure or a corrupt file on the hard disk, I sometimes get problems on one of my NT boxes during startup, a kick hard boot usually "fixes" it.
If I have seen further it is by standing on the shoulders of Giants. - Isaac Newton 1676
|
|
|
|
|
Figured out the problem. It's amazing what kind of funky state your system can get in when you try and delete msvcrt.dll after a reboot.
"When a man sits with a pretty girl for an hour, it seems like a minute. But let him sit on a hot stove for a minute and it's longer than any hour. That's relativity." - Albert Einstein
|
|
|
|
|
|
Navin wrote:
the Windows Login process quits unexpectedly and causes a bluescreen.
That's what happens when winlogon.exe dies. If you can't log in, the system bluescreens since... well, you can't log in.
--Mike--
Ericahist | Homepage | RightClick-Encrypt | 1ClickPicGrabber
Latest art~!@#2rDFA#@(#*%$Rfa39f3fqwf--=
NO CARRIER
|
|
|
|
|
Thats what I love about windows, if you do what it wants you to it'll end up breaking it :P For example today I was using the Microsoft Base Security Analyzer (see earlier thread) and it told me I shouldn't be using Builtin\Administrators as an Adminstrator on SQL Server, I thought I guess it makes sense. I followed its instructions and guess what, I can no longer even access the Server because SA is not associated with a trusted connection,  I guess it was a sign to just uninstall it. I haven't been using it and my new 2k3 Server should be finished soon ![Jig | [Dance]](https://codeproject.global.ssl.fastly.net/script/Forums/Images/jig.gif)
As for your problem, I've never used NT 4, but I would suggested backing up the HD and being prepared for a re-install or OS upgrade.
Matt Newman
Sonork: 100:11179
"Jokes should at least try to be intelligent - this is just toilet humor" - Heath Stewart
|
|
|
|
|
Matt Newman wrote:
As for your problem, I've never used NT 4, but I would suggested backing up the HD and being prepared for a re-install or OS upgrade.
THat's just it - this machine is DriveImaged, so it is trivial to get it back up and running. My problem was that I wanted to know *why* it was crashing, becuase obviously something in my app caused it to start crashing.
Windows didn't help me at all in this scenario. I looked through my debug log files and figured out what was going on. (As noted in a thread above, Windows NT will do strange things if you remove msvcrt.dll. )
"When a man sits with a pretty girl for an hour, it seems like a minute. But let him sit on a hot stove for a minute and it's longer than any hour. That's relativity." - Albert Einstein
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
