Aka the msblast worm. Aka: lovesan worm
try looking for MSBLAST.EXE too.
Here's one of a trillion sites explaining the worm and it's removal.
http://securityresponse.symantec.com...ster.worm.html
Rusty
"JabberSmith" <> wrote in message
news:...
> You have the msbasher.exe worm. It's bad. And new this morning. You
should
> take the machine off the internet and get cleaned.
>
> Delete "msbasher.exe"
>
> Remove the "windows auto update" from the RUN portion of Windows in the
> registry.
>
> Then get patched AND get a firewall (this one requires both).
>
> It's going to be an interesting week.
>
>
> "saqib" <> wrote in message
> news:_SUZa.929$...
> > hi,
> > just started my pc up as normal today, but found that after bein
connected
> > to the net for about 2/3 mins, i got this error msg:
> >
> > GENERIC HOST PROCESS FOR WIN32 SERVICES HAS ENCOUNTERED......... ETC ETC
> >
> > when i click on 'don't sent ' i then get the following msg:
> >
> > SHUTDOWN INITIATED BY NT AUTHORITY/SYSTEM
> > SYSTEM IS GOING TO RESTART IN 60 SECONDS BECAUSE RPC SERVICE TERMINATED
> > UNEXPECTEDLY.........
> >
> >
> > wether being connected to the Internet has anything to do with this, i
> dont
> > know , but could any1 tell me what the error was about?
> >
> > cheers,
> > saqib
> >
> >
> >
> >
> >
> >
>
>