-=PCTechTalk=- Re: XP Virus. or something.
- From: "David Weaver" <weaverdj@xxxxxxxxxxxxx>
- To: <pctechtalk@xxxxxxxxxxxxx>
- Date: Tue, 9 Sep 2003 21:00:21 -0400
Somebody posted this earlier.
If your machine is constantly rebooting..or has a constant RPC error
then you are infected with msblast.exe. This worm infects machines just
by being connected to the internet..you do not have to open an e-mail or
anything to become infected. For the microsoft advisory
follow the link below step 7..i advise printing this e-mail out first
and going step by step in the listed order. machines vulnerable: all
version of windows nt, 2000, xp, and server 2003 that are not protected
by a firewall.
Here is how to get rid of the virus..the first 5 steps stop the constant
rebooting allowing you to patch your computer against reinfection and to
remove the virus.
1.) start-run services.msc
2.) double-click remote procedure call(rpc)..NOT remote procedure call
locater
3.) click the recovery tab
4.) change first, second, and subsequent failure fields to take no
action.
5.) click apply then click ok..
6.) reboot(restart) your computer
7.) download and install the patch for the problem
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/secur
ity/bulletin/ms03-026.asp
Make sure you install the correct version for your operating system!!
8.) download nad run the virus removal tool
http://securityresponse.symantec.com/avcenter/FixBlast.exe
9.) download and install a firewall(do not depend on the one built into
xp) Kerio personal firewall http://www.kerio.com/kpf_home.html
Zone alarm
http://download.zonelabs.com/bin/free/1001_cnet_zdnet/zaSetup_37_202.exe
10.) if you do not have anti-virus get some..if you have some update
it..:)
-----Original Message-----
From: pctechtalk-bounce@xxxxxxxxxxxxx
[mailto:pctechtalk-bounce@xxxxxxxxxxxxx] On Behalf Of Lionel
Sent: Tuesday, September 09, 2003 8:08 PM
To: pctechtalk@xxxxxxxxxxxxx
Subject: -=PCTechTalk=- XP Virus. or something.
Hi Everyone. A friend of mine just bought a new computer ,
only had it 4 hours and got a dialogue box drop down with this message.
( NT.Authourity\system RPC.System. We are going to close down your
Internet Connection in 5 minutes. ) After 5 minutes he was cut off
and could not get back on line . He rang Microsoft and they said it
only effects XP . They are aware of it and working on it . Has
anybody up there had this problem or is it just down here in Australia.
Does anybody have a solution for it yet ?? Lionel.
To unsub or change your email settings:
//www.freelists.org/webpage/pctechtalk
To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/
For more info:
//www.freelists.org/cgi-bin/list?list_id=pctechtalk
Other related posts:
