-=PCTechTalk=- Re: XP Virus. or something.
- From: "KC" <alienkc@xxxxxxxxxxxxx>
- To: <pctechtalk@xxxxxxxxxxxxx>
- Date: Wed, 10 Sep 2003 10:39:47 -0500
The fix I had for XP was just for XP. The other fix (the -a command) was for
Win2K
those that could not get past that I sent to MS
I agree on the patches. It is one thing to know there is a hole and put out
a patch, but realistically, how many ppl go check the updates on a daily
basis. I did not hear of this until it hit.
Some have suggested that MS did this themselves. *shrugs*
----- Original Message -----
From: "David Weaver" <weaverdj@xxxxxxxxxxxxx>
To: <pctechtalk@xxxxxxxxxxxxx>
Sent: Wednesday, September 10, 2003 9:15 AM
Subject: -=PCTechTalk=- Re: XP Virus. or something.
> Fine.
>
> I get the same things from MS. I also tend to be wary for the same
> reason they released a patch that only addresses Blaster and not the
> total threat.
>
> I liked these instructions better. For a couple of reasons.
>
> 1. I fixed 25 computers in one day with these instructions. I tried
> the MS instructions on other machines. The results were varied to say
> the least. Sometimes the shutdown -a command didn't work and other
> times the patch didn't take. With these instructions all worked
> flawlessly the first time.
>
> 2. Trusting microsoft to do anything right is like a fox guarding the
> hen house. While I agree that they can't be perfect, they could do a
> better job. They tell you to apply a patch that doesn't always apply,
> and then it's found out it doesn't even address the whole problem.
>
> Dave
>
>
> -----Original Message-----
> From: pctechtalk-bounce@xxxxxxxxxxxxx
> [mailto:pctechtalk-bounce@xxxxxxxxxxxxx] On Behalf Of KC
> Sent: Tuesday, September 09, 2003 9:20 PM
> To: pctechtalk@xxxxxxxxxxxxx
> Subject: -=PCTechTalk=- Re: XP Virus. or something.
>
>
> I agree this is a fix but more complicated than the one I offered for
> the novice and the fix came directly to my tech support crew from
> microsoft themselves modemhelp.net has versions that dont apply for XP
> ----- Original Message -----
> From: "David Weaver" <weaverdj@xxxxxxxxxxxxx>
> To: <pctechtalk@xxxxxxxxxxxxx>
> Sent: Tuesday, September 09, 2003 8:00 PM
> Subject: -=PCTechTalk=- Re: XP Virus. or something.
>
> > Somebody posted this earlier.
> >
> >
> > If your machine is constantly rebooting..or has a constant RPC error
> > then you are infected with msblast.exe. This worm infects machines
> > just by being connected to the internet..you do not have to open an
> > e-mail or anything to become infected. For the microsoft advisory
> > follow the link below step 7..i advise printing this e-mail out first
> > and going step by step in the listed order. machines vulnerable: all
> > version of windows nt, 2000, xp, and server 2003 that are not
> > protected by a firewall.
> >
> > Here is how to get rid of the virus..the first 5 steps stop the
> > constant rebooting allowing you to patch your computer against
> > reinfection and to remove the virus.
> >
> > 1.) start-run services.msc
> > 2.) double-click remote procedure call(rpc)..NOT remote procedure call
>
> > locater
> > 3.) click the recovery tab
> > 4.) change first, second, and subsequent failure fields to take no
> > action.
> > 5.) click apply then click ok..
> > 6.) reboot(restart) your computer
> > 7.) download and install the patch for the problem
> > http://www.microsoft.com/technet/treeview/default.asp?url=/technet/sec
> > ur
> > ity/bulletin/ms03-026.asp
> >
> > Make sure you install the correct version for your operating system!!
> >
> > 8.) download nad run the virus removal tool
> > http://securityresponse.symantec.com/avcenter/FixBlast.exe
> >
> > 9.) download and install a firewall(do not depend on the one built
> > into
> > xp) Kerio personal firewall http://www.kerio.com/kpf_home.html
> >
> > Zone alarm
> > http://download.zonelabs.com/bin/free/1001_cnet_zdnet/zaSetup_37_202.e
> > xe
> >
> >
> > 10.) if you do not have anti-virus get some..if you have some update
> > it..:)
> >
> > -----Original Message-----
> > From: pctechtalk-bounce@xxxxxxxxxxxxx
> > [mailto:pctechtalk-bounce@xxxxxxxxxxxxx] On Behalf Of Lionel
> > Sent: Tuesday, September 09, 2003 8:08 PM
> > To: pctechtalk@xxxxxxxxxxxxx
> > Subject: -=PCTechTalk=- XP Virus. or something.
> >
> >
> > Hi Everyone. A friend of mine just bought a new computer ,
> > only had it 4 hours and got a dialogue box drop down with this
> > message. ( NT.Authourity\system RPC.System. We are going to close
> down your
> > Internet Connection in 5 minutes. ) After 5 minutes he was cut off
> > and could not get back on line . He rang Microsoft and they said it
> > only effects XP . They are aware of it and working on it . Has
> > anybody up there had this problem or is it just down here in
> Australia.
> > Does anybody have a solution for it yet ?? Lionel.
> >
> > To unsub or change your email settings:
> > //www.freelists.org/webpage/pctechtalk
> >
> > To access our Archives:
> > http://groups.yahoo.com/group/PCTechTalk/messages/
> > //www.freelists.org/archives/pctechtalk/
> >
> > For more info:
> > //www.freelists.org/cgi-bin/list?list_id=pctechtalk
> >
> >
>
>
>
> To unsub or change your email settings:
> //www.freelists.org/webpage/pctechtalk
>
> To access our Archives:
> http://groups.yahoo.com/group/PCTechTalk/messages/
> //www.freelists.org/archives/pctechtalk/
>
> For more info: //www.freelists.org/cgi-bin/list?list_id=pctechtalk
>
>
> To unsub or change your email settings:
> //www.freelists.org/webpage/pctechtalk
>
> To access our Archives:
> http://groups.yahoo.com/group/PCTechTalk/messages/
> //www.freelists.org/archives/pctechtalk/
>
> For more info:
> //www.freelists.org/cgi-bin/list?list_id=pctechtalk
>
>
To unsub or change your email settings:
//www.freelists.org/webpage/pctechtalk
To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/
For more info:
//www.freelists.org/cgi-bin/list?list_id=pctechtalk
Other related posts:
