Thank you David, I printed this and took it over to him. He is gratefull to those that helped him. Lionel. From: "David Weaver" <weaverdj@xxxxxxxxxxxxx> To: <pctechtalk@xxxxxxxxxxxxx> Sent: Wednesday, September 10, 2003 11:00 AM Subject: -=PCTechTalk=- Re: XP Virus. or something. > Somebody posted this earlier. > > > If your machine is constantly rebooting..or has a constant RPC error > then you are infected with msblast.exe. This worm infects machines just > by being connected to the internet..you do not have to open an e-mail or > anything to become infected. For the microsoft advisory > follow the link below step 7..i advise printing this e-mail out first > and going step by step in the listed order. machines vulnerable: all > version of windows nt, 2000, xp, and server 2003 that are not protected > by a firewall. > > Here is how to get rid of the virus..the first 5 steps stop the constant > rebooting allowing you to patch your computer against reinfection and to > remove the virus. > > 1.) start-run services.msc > 2.) double-click remote procedure call(rpc)..NOT remote procedure call > locater > 3.) click the recovery tab > 4.) change first, second, and subsequent failure fields to take no > action. > 5.) click apply then click ok.. > 6.) reboot(restart) your computer > 7.) download and install the patch for the problem > http://www.microsoft.com/technet/treeview/default.asp?url=/technet/secur > ity/bulletin/ms03-026.asp > > Make sure you install the correct version for your operating system!! > > 8.) download nad run the virus removal tool > http://securityresponse.symantec.com/avcenter/FixBlast.exe > > 9.) download and install a firewall(do not depend on the one built into > xp) Kerio personal firewall http://www.kerio.com/kpf_home.html > > Zone alarm > http://download.zonelabs.com/bin/free/1001_cnet_zdnet/zaSetup_37_202.exe > > > 10.) if you do not have anti-virus get some..if you have some update > it..:) > > -----Original Message----- > From: pctechtalk-bounce@xxxxxxxxxxxxx > [mailto:pctechtalk-bounce@xxxxxxxxxxxxx] On Behalf Of Lionel > Sent: Tuesday, September 09, 2003 8:08 PM > To: pctechtalk@xxxxxxxxxxxxx > Subject: -=PCTechTalk=- XP Virus. or something. > > > Hi Everyone. A friend of mine just bought a new computer , > only had it 4 hours and got a dialogue box drop down with this message. > ( NT.Authourity\system RPC.System. We are going to close down your > Internet Connection in 5 minutes. ) After 5 minutes he was cut off > and could not get back on line . He rang Microsoft and they said it > only effects XP . They are aware of it and working on it . Has > anybody up there had this problem or is it just down here in Australia. > Does anybody have a solution for it yet ?? Lionel. > To unsub or change your email settings: //www.freelists.org/webpage/pctechtalk To access our Archives: http://groups.yahoo.com/group/PCTechTalk/messages/ //www.freelists.org/archives/pctechtalk/ For more info: //www.freelists.org/cgi-bin/list?list_id=pctechtalk