Variation of the Blaster Worm?

[Matthew]

I am running Windows XP Pro, and am behind a linksys router. I have a
web server running, and any incomming traffic is sent to the server,
and not my XP machine. I thought this would be enough to keep the
blaster worm out, but I learned earlier tonight I was wrong. While
clearing up some processes, I tried to end svchost.exe. This led to
the blaster shutdown prompt. I restarted and checked for blaster.exe
and its variations, as well as installed the updates from Microsoft.
I did not find the blaster file or any of its variations, and
restarted the computer. I once again ended the svchost process, and
was prompted with the shutdown once again. Is this a new variation,
or is there something I'm missing? Also, how did it get on my XP
machine if I am not only running a firewall, but am behind a router
which only allows incomming traffic to my server?

 

[Doug Knox MS-MVP]

When you end process on a svchost.exe entry, you're essentially killing a
service. If you happened to kill the one that's hosting the RPC service,
you may get this kind of behavior.