[austechwriter] Re: W2K techie help
- From: "Damian Forlani-Brennan" <damian3@xxxxxxxxxxxx>
- To: <austechwriter@xxxxxxxxxxxxx>
- Date: Wed, 13 Aug 2003 15:01:05 +0800
OK, you have the virus that comes up with the Remote Call procedure Error
and reboots your PC, so what do you do?
FIRST:
When your PC start shutting down, go to start > run and type in:
shutdown -a
This will abort the shutdown, giving you plenty of time to fix the problem.
SECOND:
Go to:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp
And get the patch for your OS, install it and reboot.
THIRD:
Go to:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
Get the removal tool, and run it, reboot.
Run it again, just to be sure.
Your now safe. If Step two gives you a blank page or refuses to connect to
any of Microsoft's links, simply reverse Step 2 and 3, Step 3, then Step 2.
FOR THOSE WITHOUT THE VIRUS:
Follow step 2 above, it will protect you from the virus.
This is the virus that will randomly pop up when your running your PC saying
"The Remote Call Procedure has failed" and it will reboot your PC in 60
seconds. Step 1 above has a way to abort the shutdown.
It affects the following operating systems:
Windows NT 4.0 Server
Windows NT 4.0 Terminal Server Edition
Windows 2000
Windows XP 32 bit Edition
Windows XP 64 bit Edition
Windows Server 2003 32 bit Edition
Windows Server 2003 64 bit Edition
Unless you have the patch (been a critical update on windows update for
about a month) you are vulnerable if your using the above operating systems.
It is spread from an infected machine to random IP's, trying to use the same
exploit in the RPC which allows it to get into your system. This means all
you need to do is be connected to the internet to be vulnerable to the
virus.
Step 2 above shows you how to protect yourself from the flaw, and thus the
virus.
This virus does not affect users with Windows 95/98/ME. I tested this by
downloading the actual virus onto my computer (running 98) from a security
website, with no ill-effects.
----- Original Message -----
From: "Geoffrey Marnell" <gmarnell@xxxxxxxxxxxxxx>
To: <austechwriter@xxxxxxxxxxxxx>
Sent: Wednesday, August 13, 2003 2:17 PM
Subject: [austechwriter] W2K techie help
> Dear austechies,
>
> Are there are nuts-and-bolts techies out there who can tell me why I have
> suddenly started to get "svchost.exe error. Restart application" messages
> under Windows 2000 Pro (SP1). Completely stuffs Word, and I can't
disconnect
> from a dial-up internet connection. Can anyone point me in the direction
of
> a quick solution.
>
> TIA
>
> Geoffrey Marnell
>
> **************************************************
> To post a message to austechwriter, send the message to
austechwriter@xxxxxxxxxxxxxx
>
> To subscribe to austechwriter, send a message to
austechwriter-request@xxxxxxxxxxxxx with "subscribe" in the Subject field.
>
> To unsubscribe, send a message to austechwriter-request@xxxxxxxxxxxxx with
"unsubscribe" in the Subject field.
>
> To search the austechwriter archives, go to
www.freelist.org/archives/austechwriter
>
> To contact the list administrator, send a message to
austechwriter-admins@xxxxxxxxxxxxx
> **************************************************
>
>
**************************************************
To post a message to austechwriter, send the message to
austechwriter@xxxxxxxxxxxxxx
To subscribe to austechwriter, send a message to
austechwriter-request@xxxxxxxxxxxxx with "subscribe" in the Subject field.
To unsubscribe, send a message to austechwriter-request@xxxxxxxxxxxxx with
"unsubscribe" in the Subject field.
To search the austechwriter archives, go to
www.freelist.org/archives/austechwriter
To contact the list administrator, send a message to
austechwriter-admins@xxxxxxxxxxxxx
**************************************************
Other related posts:
