Fine. I get the same things from MS. I also tend to be wary for the same reason they released a patch that only addresses Blaster and not the total threat. I liked these instructions better. For a couple of reasons. 1. I fixed 25 computers in one day with these instructions. I tried the MS instructions on other machines. The results were varied to say the least. Sometimes the shutdown -a command didn't work and other times the patch didn't take. With these instructions all worked flawlessly the first time. 2. Trusting microsoft to do anything right is like a fox guarding the hen house. While I agree that they can't be perfect, they could do a better job. They tell you to apply a patch that doesn't always apply, and then it's found out it doesn't even address the whole problem. Dave -----Original Message----- From: pctechtalk-bounce@xxxxxxxxxxxxx [mailto:pctechtalk-bounce@xxxxxxxxxxxxx] On Behalf Of KC Sent: Tuesday, September 09, 2003 9:20 PM To: pctechtalk@xxxxxxxxxxxxx Subject: -=PCTechTalk=- Re: XP Virus. or something. I agree this is a fix but more complicated than the one I offered for the novice and the fix came directly to my tech support crew from microsoft themselves modemhelp.net has versions that dont apply for XP ----- Original Message ----- From: "David Weaver" <weaverdj@xxxxxxxxxxxxx> To: <pctechtalk@xxxxxxxxxxxxx> Sent: Tuesday, September 09, 2003 8:00 PM Subject: -=PCTechTalk=- Re: XP Virus. or something. > Somebody posted this earlier. > > > If your machine is constantly rebooting..or has a constant RPC error > then you are infected with msblast.exe. This worm infects machines > just by being connected to the internet..you do not have to open an > e-mail or anything to become infected. For the microsoft advisory > follow the link below step 7..i advise printing this e-mail out first > and going step by step in the listed order. machines vulnerable: all > version of windows nt, 2000, xp, and server 2003 that are not > protected by a firewall. > > Here is how to get rid of the virus..the first 5 steps stop the > constant rebooting allowing you to patch your computer against > reinfection and to remove the virus. > > 1.) start-run services.msc > 2.) double-click remote procedure call(rpc)..NOT remote procedure call > locater > 3.) click the recovery tab > 4.) change first, second, and subsequent failure fields to take no > action. > 5.) click apply then click ok.. > 6.) reboot(restart) your computer > 7.) download and install the patch for the problem > http://www.microsoft.com/technet/treeview/default.asp?url=/technet/sec > ur > ity/bulletin/ms03-026.asp > > Make sure you install the correct version for your operating system!! > > 8.) download nad run the virus removal tool > http://securityresponse.symantec.com/avcenter/FixBlast.exe > > 9.) download and install a firewall(do not depend on the one built > into > xp) Kerio personal firewall http://www.kerio.com/kpf_home.html > > Zone alarm > http://download.zonelabs.com/bin/free/1001_cnet_zdnet/zaSetup_37_202.e > xe > > > 10.) if you do not have anti-virus get some..if you have some update > it..:) > > -----Original Message----- > From: pctechtalk-bounce@xxxxxxxxxxxxx > [mailto:pctechtalk-bounce@xxxxxxxxxxxxx] On Behalf Of Lionel > Sent: Tuesday, September 09, 2003 8:08 PM > To: pctechtalk@xxxxxxxxxxxxx > Subject: -=PCTechTalk=- XP Virus. or something. > > > Hi Everyone. A friend of mine just bought a new computer , > only had it 4 hours and got a dialogue box drop down with this > message. ( NT.Authourity\system RPC.System. We are going to close down your > Internet Connection in 5 minutes. ) After 5 minutes he was cut off > and could not get back on line . He rang Microsoft and they said it > only effects XP . They are aware of it and working on it . Has > anybody up there had this problem or is it just down here in Australia. > Does anybody have a solution for it yet ?? Lionel. > > To unsub or change your email settings: > //www.freelists.org/webpage/pctechtalk > > To access our Archives: > http://groups.yahoo.com/group/PCTechTalk/messages/ > //www.freelists.org/archives/pctechtalk/ > > For more info: > //www.freelists.org/cgi-bin/list?list_id=pctechtalk > > To unsub or change your email settings: //www.freelists.org/webpage/pctechtalk To access our Archives: http://groups.yahoo.com/group/PCTechTalk/messages/ //www.freelists.org/archives/pctechtalk/ For more info: //www.freelists.org/cgi-bin/list?list_id=pctechtalk To unsub or change your email settings: //www.freelists.org/webpage/pctechtalk To access our Archives: http://groups.yahoo.com/group/PCTechTalk/messages/ //www.freelists.org/archives/pctechtalk/ For more info: //www.freelists.org/cgi-bin/list?list_id=pctechtalk