Following the Blaster Worm

[pointer]

I have Norton Anti Virus Cover for which I pay annually.
After immediately picking up the Blaster worm yesterday,
I eventually managed to download the patch. Problem is
the patch tells me it's isolated the virus, then I get a
message telling me there is a System Shutdown (usually 1
minute's warning) caused by NT Authority System Remote
Procedure Call has necessitated the closure. I am on
XP, not NT, and I have tried various things from pages
and pages of hints suggested on the Microsoft "help"
pages. I have tried emailing but believe it or not the
Microsoft email system - whilst it says mail us - has no
address automatically in the drop down email blank. All
this from a huge & computer geared company!! (not
impressed as you can tell) Everything I have had to do
on email or internet has been within the 1 minute closure
warning - I am just about going round the bend!!! If
anyone out there can save my sanity - I would appreciate
your help as to how to turn off the NT authority system
RPC closure!

 

[=?iso-8859-1?Q?Hans_J=F6nsson?=]

I could delete the blast with McAfee after turning of
System Restore - but not without. I used symantec's
cleaning tool - downloadable - also after turning off SR.
Both tools made a clean computer. mvh hans

 

[raji]

-----Original Message-----
I have Norton Anti Virus Cover for which I pay annually.
After immediately picking up the Blaster worm yesterday,
I eventually managed to download the patch. Problem is
the patch tells me it's isolated the virus, then I get a
message telling me there is a System Shutdown (usually 1
minute's warning) caused by NT Authority System Remote
Procedure Call has necessitated the closure. I am on
XP, not NT, and I have tried various things from pages
and pages of hints suggested on the Microsoft "help"
pages. I have tried emailing but believe it or not the
Microsoft email system - whilst it says mail us - has no
address automatically in the drop down email blank. All
this from a huge & computer geared company!! (not
impressed as you can tell) Everything I have had to do
on email or internet has been within the 1 minute closure
warning - I am just about going round the bend!!! If
anyone out there can save my sanity - I would appreciate
your help as to how to turn off the NT authority system
RPC closure!
.

 

[Jupiter Jones [MVP]]

The patch from Microsoft is NOT the repair, it is the prevention.
You also need to repair following ALL steps.
DISCONNECT the subject computer from any network IMMEDIATELY.

Install or enable a firewall IMMEDIATELY:
http://support.microsoft.com/?kbid=283673

VERY IMPORTANT to follow ALL steps, closing ports or installing the
patch is NOT enough.
Download the patch and regedit referenced in the article below.
You may need to do this at an uninfected computer and burn to CD or
save on floppies.
Each file is small enough to fit on a floppy.

Follow this to clean and protect your computer:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

After this is resolved prevent similar occurrences by installing ALL
Critical Updates from Windows Update.
Keep antivirus up to date and run at least weekly.
Install or enable a firewall.