-=PCTechTalk=- Re: XP Virus. or something.
- From: "David Weaver" <weaverdj@xxxxxxxxxxxxx>
- To: <pctechtalk@xxxxxxxxxxxxx>
- Date: Wed, 10 Sep 2003 10:15:32 -0400
Fine.
I get the same things from MS. I also tend to be wary for the same
reason they released a patch that only addresses Blaster and not the
total threat.
I liked these instructions better. For a couple of reasons.
1. I fixed 25 computers in one day with these instructions. I tried
the MS instructions on other machines. The results were varied to say
the least. Sometimes the shutdown -a command didn't work and other
times the patch didn't take. With these instructions all worked
flawlessly the first time.
2. Trusting microsoft to do anything right is like a fox guarding the
hen house. While I agree that they can't be perfect, they could do a
better job. They tell you to apply a patch that doesn't always apply,
and then it's found out it doesn't even address the whole problem.
Dave
-----Original Message-----
From: pctechtalk-bounce@xxxxxxxxxxxxx
[mailto:pctechtalk-bounce@xxxxxxxxxxxxx] On Behalf Of KC
Sent: Tuesday, September 09, 2003 9:20 PM
To: pctechtalk@xxxxxxxxxxxxx
Subject: -=PCTechTalk=- Re: XP Virus. or something.
I agree this is a fix but more complicated than the one I offered for
the novice and the fix came directly to my tech support crew from
microsoft themselves modemhelp.net has versions that dont apply for XP
----- Original Message -----
From: "David Weaver" <weaverdj@xxxxxxxxxxxxx>
To: <pctechtalk@xxxxxxxxxxxxx>
Sent: Tuesday, September 09, 2003 8:00 PM
Subject: -=PCTechTalk=- Re: XP Virus. or something.
> Somebody posted this earlier.
>
>
> If your machine is constantly rebooting..or has a constant RPC error
> then you are infected with msblast.exe. This worm infects machines
> just by being connected to the internet..you do not have to open an
> e-mail or anything to become infected. For the microsoft advisory
> follow the link below step 7..i advise printing this e-mail out first
> and going step by step in the listed order. machines vulnerable: all
> version of windows nt, 2000, xp, and server 2003 that are not
> protected by a firewall.
>
> Here is how to get rid of the virus..the first 5 steps stop the
> constant rebooting allowing you to patch your computer against
> reinfection and to remove the virus.
>
> 1.) start-run services.msc
> 2.) double-click remote procedure call(rpc)..NOT remote procedure call
> locater
> 3.) click the recovery tab
> 4.) change first, second, and subsequent failure fields to take no
> action.
> 5.) click apply then click ok..
> 6.) reboot(restart) your computer
> 7.) download and install the patch for the problem
> http://www.microsoft.com/technet/treeview/default.asp?url=/technet/sec
> ur
> ity/bulletin/ms03-026.asp
>
> Make sure you install the correct version for your operating system!!
>
> 8.) download nad run the virus removal tool
> http://securityresponse.symantec.com/avcenter/FixBlast.exe
>
> 9.) download and install a firewall(do not depend on the one built
> into
> xp) Kerio personal firewall http://www.kerio.com/kpf_home.html
>
> Zone alarm
> http://download.zonelabs.com/bin/free/1001_cnet_zdnet/zaSetup_37_202.e
> xe
>
>
> 10.) if you do not have anti-virus get some..if you have some update
> it..:)
>
> -----Original Message-----
> From: pctechtalk-bounce@xxxxxxxxxxxxx
> [mailto:pctechtalk-bounce@xxxxxxxxxxxxx] On Behalf Of Lionel
> Sent: Tuesday, September 09, 2003 8:08 PM
> To: pctechtalk@xxxxxxxxxxxxx
> Subject: -=PCTechTalk=- XP Virus. or something.
>
>
> Hi Everyone. A friend of mine just bought a new computer ,
> only had it 4 hours and got a dialogue box drop down with this
> message. ( NT.Authourity\system RPC.System. We are going to close
down your
> Internet Connection in 5 minutes. ) After 5 minutes he was cut off
> and could not get back on line . He rang Microsoft and they said it
> only effects XP . They are aware of it and working on it . Has
> anybody up there had this problem or is it just down here in
Australia.
> Does anybody have a solution for it yet ?? Lionel.
>
> To unsub or change your email settings:
> //www.freelists.org/webpage/pctechtalk
>
> To access our Archives:
> http://groups.yahoo.com/group/PCTechTalk/messages/
> //www.freelists.org/archives/pctechtalk/
>
> For more info:
> //www.freelists.org/cgi-bin/list?list_id=pctechtalk
>
>
To unsub or change your email settings:
//www.freelists.org/webpage/pctechtalk
To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/
For more info: //www.freelists.org/cgi-bin/list?list_id=pctechtalk
To unsub or change your email settings:
//www.freelists.org/webpage/pctechtalk
To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/
For more info:
//www.freelists.org/cgi-bin/list?list_id=pctechtalk
Other related posts:
