Help

[Lex]

Hola dolts as you might have seen i am not on msn or hw/hw2 at the moment...
If anyone has a clue what i should do i would be grateful.
My comp is completely fawked at the moment... I seem to have gotten a virus that i can't get rid of
What happens is: i can start up ok sometimes then all of a sudden i get the following mess: SystemError: remote procedure call rpc has been terminated therefor your computer will restart in 60 seconds.
Also whenever i have the comp running i have a 100% cpu usage due to 4 svc.host.exe running and something called support3.exe running and all these progs use between 35-65% at all times
I have scanned my compwith adaware,spybot,mcafee,norton,trend online and my own completely updated panda titanium antivirus and i have located some viruses in win32 but the problem keep reaccuring.
I even got a account setup without my knowledge called support at first it was pw:ed but i managed to delete the pw when i tried to delete the account i couldn't even start b4 it was reinstalled...
I have tried reformatting both in dos and with the xp reformat commands but can't even do that.
Unfortunatly i don't have the money to take it to a compshop for fixing at the moment due to severly fawked economy (unemployed for 3 months) so all suggestions that can help me is welcome...
Thnx for any help yours truly Lex.

[Phaeton]

Hola Lexual,

Ok xp can be a bit tempermental when trying to reformat. I found this out the hard way when i had my BIOS settings a bit jacked up. So reset your BIOS to default first.

1. go into BIOS and move over to the "BOOT" tab, move you CDROM up to the top of the boot list.

2. put your XP cd in the cdrom and let it boot from that. then follow through the formating instructions. Be certain to delete ANY partitions you have, cause it's pretty well fucked as it sits now so start from scratch.

It actually took me about 6 hours to install XP on my new system, and it was annoying as hell, mainly because it was my first experience with XP pro. I almost threw the CD out the window and installed 2k pro instead. Just stick with it and try to have another comp handy so you can post any questions that may come up. Don't get frustrated cause tbh we've all been there at one point or another.

[Metho]

get into your admin services and disable the service "messenger".

install a good firewall such as zone alarm and crank up security so that everthing has to ask permission to access the net.

go to MS and download the MSblaster patch.

the first problem ur mentioning is definately blaster, as for the high CPU usage, dunno - ask Mr Google if phae's suggestions dont work...

[shutupandshave]

Go into services and edit "Remote procedure call" (start > control panel > admininstrative tools > services) then click on the "recovery" tab. Change "restart the computer" to restart the service for all three.

You can now get on the net - download the various patches and removal tools. Be aware that the patch from Microsoft doesn't fix the problem, just the symptoms. Goto www.symantec.com and download the msblaster removal tool.

[Lex]

Thnx guys i did have blaster i also seem to have 2 others that are uncleanable agobot and sddrom no program i have tried have been able to get em away so far and there are no info about how to remove anywhere i looked.

[reki]

to kill agobot:

Open Registry Editor. To do this, click Start>Run, type Regedit, then press Enter.
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>Software>Microsoft>
Windows>CurrentVersion>Run
In the right panel, locate and delete the entry:
WinFX = "cssrs.exe"
Display Drivers = "cssrs.exe"
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>Software>Microsoft>Windows>
CurrentVersion>RunServices
In the right panel, locate and delete the entry:
WinFX = "cssrs.exe"
Display Drivers = "cssrs.exe"
In the left panel, locate and delete the following:
HKEY_LOCAL_MACHINE>System>CurrentControlSet>
Services>Driver
Close Registry Editor.

Then install this scanner & cleaner.