Please help - PC keeps reseting - software error

[fergie]

Hi.
My PC keeps reseting - these are the errors I'm getting (taken from system log)

The COM+ Event System detected a bad return code during its internal processing. HRESULT was 800706BA from line 44 of d:\nt\com\com1x\src\events\tier1\eventsystemobj.cp p. Please contact Microsoft Product Support Services to report this error.


The COM+ Event System could not remove the EventSystem.EventSubscription object {EEE76A81-B368-4C60-BF2B-4A07A4DF6E44}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}. The HRESULT was C0000005.

The COM+ Event System detected a bad return code during its internal processing. HRESULT was 80040206 from line 421 of d:\nt\com\com1x\src\events\tier2\notify.cpp. Please contact Microsoft Product Support Services to report this error.

The COM+ Event System detected a bad return code during its internal processing. HRESULT was 800706BA from line 44 of d:\nt\com\com1x\src\events\tier1\eventsystemobj.cp p. Please contact Microsoft Product Support Services to report this error.

Fault bucket 02122897.


Faulting application svchost.exe, version 5.1.2600.0, faulting module unknown, version 0.0.0.0, fault address 0x00000000.


The description for Event ID ( 13 ) in Source ( ccEvtMgr ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: ccEvtMgr: Failed to load the configuration settings, terminating process!.

[fergie]

Happened again - reset in 60sec
BRB

[fergie]

arh, jeeze
I should have 2 - 4min before it resets again.
Anyway - those errors are taken from system log.
I'm on WIN XP PRO
EVerythings fine - then a error box comes up with this:


Iniated by NT AUTHORITY \ SYSTEM
The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine.

It says to save everything, then it counts down and just restarts.

Any one know whats happening??

Cheers

[Mike]

Read the other posts in this forum on the matter - it seems you have a new Worm virus.

Mike.

[tweak\'e]

have a look here (http://www.warp2search.net/modules.php?name=News&file=article&sid=13750) theres been a few posts on this rpc hack.

[fergie]

Sorry people (and thanks Mike) I didn't see that.
I've been away from PF1 for a few days - I should have checked b4 I posted.

Cheers

[Pheonix]

Its a trojan type of file causing it.
Removal Instructions
On Windows NT/2000/XP systems, press CTRL+SHIFT+ESC, and click the Processes tab. In the list of running programs, locate the process: MSBLAST.EXE Select the malware process, then press either the End Task or the End Process button, depending on the version of Windows on your system. To check if the malware process has been terminated, close Task Manager, and then open it again. Close Task Manager. Open Registry Editor. To do this, click Start /Run, type Regedit, then press Enter. In the left panel, double-click the following: HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/CurrentVersion/Run In the right panel, locate and delete the entry: ”windows auto update" = MSBLAST.EXE Close Registry Editor.

And Finally
scan your system to remove the virus.. See http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MSBLAST.A&VSect=T for technical details

(thanks to d.snell)

[fergie]

thanks guys.
All better now :D

Seems as if this is everywhere - went to another PC forum - full of people screaming out fro help all regarding same problem.

2 of my mates have rung me up with the same problem.

But thanks again