Hi David You words don't relate to the earlier models like 9x or ME for others. Keith ----- Original Message ----- From: "David Weaver" <weaverdj@xxxxxxxxxxxxx> To: <pctechtalk@xxxxxxxxxxxxx> Sent: Wednesday, August 27, 2003 9:55 AM Subject: -=PCTechTalk=- Re: Remote Procedure Call > He's got blaster and here's what you do. > > If your machine is constantly rebooting. or has a constant RPC error > then you are infected with msblast.exe. This worm infects machines just > by being connected to the internet..you do not have to open an e-mail or > anything to become infected. For the microsoft advisory > follow the link below step 7..i advise printing this e-mail out first > and going step by step in the listed order. machines vulnerable: all > version of windows nt, 2000, xp, and server 2003 that are not protected > by a firewall. > > Here is how to get rid of the virus..the first 5 steps stop the constant > rebooting allowing you to patch your computer against reinfection and to > remove the virus. > > 1.) start-run services.msc > 2.) double-click remote procedure call(rpc)..NOT remote procedure call > locater > 3.) click the recovery tab > 4.) change first, second, and subsequent failure fields to take no > action. > 5.) click apply then click ok.. > 6.) reboot(restart) your computer > 7.) download and install the patch for the problem > http://www.microsoft.com/technet/treeview/default.asp?url=/technet/secur > ity/bulletin/ms03-026.asp > > Make sure you install the correct version for your operating system!! > > 8.) download nad run the virus removal tool > http://securityresponse.symantec.com/avcenter/FixBlast.exe > > 9.) download and install a firewall(do not depend on the one built into > xp) Kerio personal firewall http://www.kerio.com/kpf_home.html > > Zone alarm > http://download.zonelabs.com/bin/free/1001_cnet_zdnet/zaSetup_37_202.exe > > > 10.) if you do not have anti-virus get some..if you have some update > it..: > > -----Original Message----- > From: pctechtalk-bounce@xxxxxxxxxxxxx > [mailto:pctechtalk-bounce@xxxxxxxxxxxxx] On Behalf Of Rick > Sent: Tuesday, August 26, 2003 7:56 PM > To: pctechtalk@xxxxxxxxxxxxx > Subject: -=PCTechTalk=- Remote Procedure Call > > > Does ANYONE know what this is??? A friend of mine has an XP machine, > and this comes up after about 5 minutes after booting. A dialog box > comes up and says that the PC needs to be shutdown and gives a 1 minute > countdown and then refers to this RPC. Remote Procedure Call. I > reinstalled Norton on his machine, went out to the web and downloaded > the updates, and then did a system scan, coming up with nothing at all. > Any ideas??? Thank you. > > Rick > > > To unsub or change your email settings: > //www.freelists.org/webpage/pctechtalk > > To access our Archives: > http://groups.yahoo.com/group/PCTechTalk/messages/ > //www.freelists.org/archives/pctechtalk/ > > For more info: //www.freelists.org/cgi-bin/list?list_id=pctechtalk > > To unsub or change your email settings: > //www.freelists.org/webpage/pctechtalk > > To access our Archives: > http://groups.yahoo.com/group/PCTechTalk/messages/ > //www.freelists.org/archives/pctechtalk/ > > For more info: > //www.freelists.org/cgi-bin/list?list_id=pctechtalk > > --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.512 / Virus Database: 309 - Release Date: 19/08/2003 To unsub or change your email settings: //www.freelists.org/webpage/pctechtalk To access our Archives: http://groups.yahoo.com/group/PCTechTalk/messages/ //www.freelists.org/archives/pctechtalk/ For more info: //www.freelists.org/cgi-bin/list?list_id=pctechtalk