   possible virus
  I think I have a virus on my WinXP comp. whenever I run anti-virus software, it automatically closes after 15 seconds. This doesn''t happen to any other type of software. IE for some reason no longer works. Worst of all, I get this message about having to shut down windows because of RPC initiated by NT AUTHORITY/SYSTEM. I looked up "NT AUTHORITY" online and found a lot of stuff about the blaster worm, so i downloaded one of symantec''s tools to fix it, but it doesn''t seem to detect the virus. I can''t get to windows update and patch it (if there is a patch for it) because it''s integrateed into IE. What do you think?   Check out my raytracer at http://simp-raytracer.sourceforge.net. Download it at http://www.sourceforge.net/projects/simp-raytracer. 
  Try scanning in safe mode or boot from floppy and scan from there. ;  Try safemode. ;  I assume that it only reboots when you''re online?Try doing a netstat and see what ports are opened, then do a google search for a virus that opens those ports. You mentioned Blaster, which is what came to my mind first - There''s a MS tool called Stinger that you can try - we recommend it to all our clients and it seems to do the job.;  Well, because you mentioned RPC, I would guess that you''re being attacked from port 135.   ----------------------------------"War does not determine who is right, only who is left." -Bertrand Russell ;  LIEK BLASTER.Z OMGOMGOMG LIEK~!- CDPS: Try http://sarc.com/ to see if there are any recent viruses with those "symptoms".   Brought to you by Code_Dark;  My first thought was Blaster as well, maybe it''s a new variant though.  Also, if you don''t know it already, you can type shutdown -n  i believe into a console and that''ll keep it from rebooting so you can have more time to work on getting rid of it. ;quote:Original post by caffeineaddict  My first thought was Blaster as well, maybe it''s a new variant though.  Also, if you don''t know it already, you can type shutdown -n  i believe into a console and that''ll keep it from rebooting so you can have more time to work on getting rid of it.   it''s shutdown -a -a means abort -n means no/cancel    ;  thanks for clearing that up  i knew it was one of the two. ;  When I had the blaster worm and it kept shutting down the computer before I could download a patch (Win2k and XP) I did this:Go to Admin Tools -> Services -> Remote Procedure CallRight click, go to properties then the recovery tab and set it to restart the service instead of the computer, that should allow the internet to work long enough to find a virus scanner that works 