Blaster doesn't infect earlier machines. Blaster specifically infects Win2000/XP OS families. Dave -----Original Message----- From: pctechtalk-bounce@xxxxxxxxxxxxx [mailto:pctechtalk-bounce@xxxxxxxxxxxxx] On Behalf Of Keith Rogers Sent: Tuesday, August 26, 2003 10:53 PM To: pctechtalk@xxxxxxxxxxxxx Subject: -=PCTechTalk=- Re: Remote Procedure Call Hi David You words don't relate to the earlier models like 9x or ME for others. Keith ----- Original Message ----- From: "David Weaver" <weaverdj@xxxxxxxxxxxxx> To: <pctechtalk@xxxxxxxxxxxxx> Sent: Wednesday, August 27, 2003 9:55 AM Subject: -=PCTechTalk=- Re: Remote Procedure Call > He's got blaster and here's what you do. > > If your machine is constantly rebooting. or has a constant RPC error > then you are infected with msblast.exe. This worm infects machines > just by being connected to the internet..you do not have to open an > e-mail or anything to become infected. For the microsoft advisory > follow the link below step 7..i advise printing this e-mail out first > and going step by step in the listed order. machines vulnerable: all > version of windows nt, 2000, xp, and server 2003 that are not > protected by a firewall. > > Here is how to get rid of the virus..the first 5 steps stop the > constant rebooting allowing you to patch your computer against > reinfection and to remove the virus. > > 1.) start-run services.msc > 2.) double-click remote procedure call(rpc)..NOT remote procedure call > locater > 3.) click the recovery tab > 4.) change first, second, and subsequent failure fields to take no > action. > 5.) click apply then click ok.. > 6.) reboot(restart) your computer > 7.) download and install the patch for the problem > http://www.microsoft.com/technet/treeview/default.asp?url=/technet/sec > ur > ity/bulletin/ms03-026.asp > > Make sure you install the correct version for your operating system!! > > 8.) download nad run the virus removal tool > http://securityresponse.symantec.com/avcenter/FixBlast.exe > > 9.) download and install a firewall(do not depend on the one built > into > xp) Kerio personal firewall http://www.kerio.com/kpf_home.html > > Zone alarm > http://download.zonelabs.com/bin/free/1001_cnet_zdnet/zaSetup_37_202.e > xe > > > 10.) if you do not have anti-virus get some..if you have some update > it..: > > -----Original Message----- > From: pctechtalk-bounce@xxxxxxxxxxxxx > [mailto:pctechtalk-bounce@xxxxxxxxxxxxx] On Behalf Of Rick > Sent: Tuesday, August 26, 2003 7:56 PM > To: pctechtalk@xxxxxxxxxxxxx > Subject: -=PCTechTalk=- Remote Procedure Call > > > Does ANYONE know what this is??? A friend of mine has an XP > machine, and this comes up after about 5 minutes after booting. A > dialog box comes up and says that the PC needs to be shutdown and > gives a 1 minute countdown and then refers to this RPC. Remote > Procedure Call. I reinstalled Norton on his machine, went out to the > web and downloaded the updates, and then did a system scan, coming up > with nothing at all. Any ideas??? Thank you. > > Rick > > > To unsub or change your email settings: > //www.freelists.org/webpage/pctechtalk > > To access our Archives: > http://groups.yahoo.com/group/PCTechTalk/messages/ > //www.freelists.org/archives/pctechtalk/ > > For more info: > //www.freelists.org/cgi-bin/list?list_id=pctechtalk > > To unsub or change your email settings: > //www.freelists.org/webpage/pctechtalk > > To access our Archives: > http://groups.yahoo.com/group/PCTechTalk/messages/ > //www.freelists.org/archives/pctechtalk/ > > For more info: > //www.freelists.org/cgi-bin/list?list_id=pctechtalk > > --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.512 / Virus Database: 309 - Release Date: 19/08/2003 To unsub or change your email settings: //www.freelists.org/webpage/pctechtalk To access our Archives: http://groups.yahoo.com/group/PCTechTalk/messages/ //www.freelists.org/archives/pctechtalk/ For more info: //www.freelists.org/cgi-bin/list?list_id=pctechtalk To unsub or change your email settings: //www.freelists.org/webpage/pctechtalk To access our Archives: http://groups.yahoo.com/group/PCTechTalk/messages/ //www.freelists.org/archives/pctechtalk/ For more info: //www.freelists.org/cgi-bin/list?list_id=pctechtalk