PDA

View Full Version : Generic Host Process for Win32 keeps shutting my computer


stephen
March 15th 04, 11:41 AM
I have been really mad with this problem. It keeps
popping up and automatically shuts my computer when I am
on-line. The following is the remarks relating to the
shut down: dcomx.exe has encountered a problem and would
need to shut down. This shutdown is initiated by
NT AUTHORITY\SYSTEM

What must I do?

Rick \Nutcase\ Rogers
March 15th 04, 12:02 PM
Hi Stephen,

When the shutdown warning appears, click start/run and enter "shutdown -a"
to halt the process. It's a virus called blaster or lovesan. Information:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://www.pchell.com/virus/msblast.shtml
http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-039: A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious
Programs
http://support.microsoft.com/?kbid=824146

Problem is, you needed to install the patch BEFORE you got infected to avoid
it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
http://mvp.support.microsoft.com/
Associate Expert - WinXP - Expert Zone
www.microsoft.com/windowsxp/expertzone
Win98 Help - www.rickrogers.org

"stephen" > wrote in message
...
> I have been really mad with this problem. It keeps
> popping up and automatically shuts my computer when I am
> on-line. The following is the remarks relating to the
> shut down: dcomx.exe has encountered a problem and would
> need to shut down. This shutdown is initiated by
> NT AUTHORITY\SYSTEM
>
> What must I do?

Google