Blaster worm or someth.

[Guest]

I 'd recieve the famous alert of this worm that my system going to restart in 59sec and...i did someth. with services with the RPC, now i dont recieve any alert but in my task manager i have a SVCHOST.exe that uses near 70 % of cpu clock so mu system is always working with cpu 100% busy!!! and even i can not look into my registry cause it closes after 2-3 sec when i open it and some other things like msconfig runs but it closes, I even downloaded the security patch from Microsoft for this worm but it closes too after runing it !!!
Plzzz help me,,, i don't want to formating and reinstalling my xp pro!!!!!
Thanks a lot !!!!!

 

[David H. Lipman]

When you get the shutdown message...

Go to; Start --> Run
enter; shutdown -a

This will halt the shutdown and give you a chance to Download the McAfee worm removal tool,
Stinger: http://vil.nai.com/vil/stinger/ and install following patch for the RPC/RPCSS
Buffer Overflow Vulnerability that is addressed by Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

Please read: http://www.microsoft.com/security/incident/blast.asp

You also need a FireWall. If you don't patch the PC and not use a FireWall then you will
just be re-infected.

I also suggest the installation of *ALL* MS Critical Updates ASAP.

Dave



| I 'd recieve the famous alert of this worm that my system going to restart in 59sec
and...i did someth. with services with the RPC, now i dont recieve any alert but in my task
manager i have a SVCHOST.exe that uses near 70 % of cpu clock so mu system is always working
with cpu 100% busy!!! and even i can not look into my registry cause it closes after 2-3 sec
when i open it and some other things like msconfig runs but it closes, I even downloaded the
security patch from Microsoft for this worm but it closes too after runing it !!!!
| Plzzz help me,,, i don't want to formating and reinstalling my xp pro!!!!!!
| Thanks a lot !!!!!

 

[Guest]

Do a Online scan. There several Virus's that attact it,
msconfig and regedit.

http://security.symantec.com/ssc/home.asp?
j=1&langid=ie&venid=sym&plfid=23&pkj=YFLXORVWHFHMFNZMBBX

After you'll find out how to remove it.

-----Original Message-----
I 'd recieve the famous alert of this worm that my

system going to restart in 59sec and...i did someth. with
services with the RPC, now i dont recieve any alert but
in my task manager i have a SVCHOST.exe that uses near 70
% of cpu clock so mu system is always working with cpu
100% busy!!! and even i can not look into my registry
cause it closes after 2-3 sec when i open it and some
other things like msconfig runs but it closes, I even
downloaded the security patch from Microsoft for this
worm but it closes too after runing it !!!!