-=PCTechTalk=- Re: Remote Procedure Call

  • From: "David Weaver" <weaverdj@xxxxxxxxxxxxx>
  • To: <pctechtalk@xxxxxxxxxxxxx>
  • Date: Wed, 27 Aug 2003 07:06:29 -0400

Blaster doesn't infect earlier machines.  Blaster specifically infects
Win2000/XP OS families.

Dave

-----Original Message-----
From: pctechtalk-bounce@xxxxxxxxxxxxx
[mailto:pctechtalk-bounce@xxxxxxxxxxxxx] On Behalf Of Keith Rogers
Sent: Tuesday, August 26, 2003 10:53 PM
To: pctechtalk@xxxxxxxxxxxxx
Subject: -=PCTechTalk=- Re: Remote Procedure Call


Hi David

You words don't relate to the earlier models like 9x or ME for others.

Keith

----- Original Message ----- 
From: "David Weaver" <weaverdj@xxxxxxxxxxxxx>
To: <pctechtalk@xxxxxxxxxxxxx>
Sent: Wednesday, August 27, 2003 9:55 AM
Subject: -=PCTechTalk=- Re: Remote Procedure Call


> He's got blaster and here's what you do.
> 
> If your machine is constantly rebooting. or has a constant RPC error 
> then you are infected with msblast.exe.  This worm infects machines 
> just by being connected to the internet..you do not have to open an 
> e-mail or anything to become infected.  For the microsoft advisory 
> follow the link below step 7..i advise printing this e-mail out first 
> and going step by step in the listed order. machines vulnerable: all 
> version of windows nt, 2000, xp, and server 2003 that are not 
> protected by a firewall.
> 
> Here is how to get rid of the virus..the first 5 steps stop the 
> constant rebooting allowing you to patch your computer against 
> reinfection and to remove the virus.
> 
> 1.) start-run services.msc
> 2.) double-click remote procedure call(rpc)..NOT remote procedure call

> locater
> 3.) click the recovery tab
> 4.) change first, second, and subsequent failure fields to take no 
> action.
> 5.) click apply then click ok..
> 6.) reboot(restart) your computer
> 7.) download and install the patch for the problem 
> http://www.microsoft.com/technet/treeview/default.asp?url=/technet/sec
> ur
> ity/bulletin/ms03-026.asp
> 
> Make sure you install the correct version for your operating system!!
> 
> 8.) download nad run the virus removal tool 
> http://securityresponse.symantec.com/avcenter/FixBlast.exe
> 
> 9.) download and install a firewall(do not depend on the one built 
> into
> xp) Kerio personal firewall http://www.kerio.com/kpf_home.html
> 
> Zone alarm 
> http://download.zonelabs.com/bin/free/1001_cnet_zdnet/zaSetup_37_202.e
> xe
> 
> 
> 10.) if you do not have anti-virus get some..if you have some update
> it..:
> 
> -----Original Message-----
> From: pctechtalk-bounce@xxxxxxxxxxxxx 
> [mailto:pctechtalk-bounce@xxxxxxxxxxxxx] On Behalf Of Rick
> Sent: Tuesday, August 26, 2003 7:56 PM
> To: pctechtalk@xxxxxxxxxxxxx
> Subject: -=PCTechTalk=- Remote Procedure Call
> 
> 
>    Does ANYONE know what this is??? A friend of mine has an XP 
> machine, and this comes up after about 5 minutes after booting. A 
> dialog box comes up and says that the PC needs to be shutdown and 
> gives a 1 minute countdown and then refers to this RPC. Remote 
> Procedure Call. I reinstalled Norton on his machine, went out to the 
> web and downloaded the updates, and then did a system scan, coming up 
> with nothing at all. Any ideas??? Thank you.
> 
> Rick
> 
> 
> To unsub or change your email settings: 
> //www.freelists.org/webpage/pctechtalk
> 
> To access our Archives: 
> http://groups.yahoo.com/group/PCTechTalk/messages/
> //www.freelists.org/archives/pctechtalk/
> 
> For more info: 
> //www.freelists.org/cgi-bin/list?list_id=pctechtalk
> 
> To unsub or change your email settings: 
> //www.freelists.org/webpage/pctechtalk
> 
> To access our Archives: 
> http://groups.yahoo.com/group/PCTechTalk/messages/
> //www.freelists.org/archives/pctechtalk/
> 
> For more info: 
> //www.freelists.org/cgi-bin/list?list_id=pctechtalk
> 
> 


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.512 / Virus Database: 309 - Release Date: 19/08/2003 To
unsub or change your email settings:
//www.freelists.org/webpage/pctechtalk

To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/

For more info: //www.freelists.org/cgi-bin/list?list_id=pctechtalk


To unsub or change your email settings:
//www.freelists.org/webpage/pctechtalk

To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/

For more info:
//www.freelists.org/cgi-bin/list?list_id=pctechtalk

Other related posts: