HELP! Do not have worm!

  • Thread starter Thread starter Leslie S.
  • Start date Start date
L

Leslie S.

Ok, I posted yesterday about my problem. Please do not e-
mail me that I have Blaster or Nachi. I have scanned my
compy with 4 different virus scans, including symantec
and McAfee. I get the RPC service message and shutdown.
When I try to apply the patch, it says it could not
determine the integrity of file Update.inf and please
ensure my Cryptographic services are running. I checked
and they are. I also found that they rely on the RPC
service to function! What in God's name can I do? I've
been searching, testing, and reading for many hours.
PLEASE HELP!!!!!!!
 
Frank said:
Try renaming the c:\windows\system32\catroot2 folder to catroot2bak. Then
try the update.
Click to expand...

After the patch successfully installs run the FixBlast removal tool
again - if you never got the patch installed you could be getting
re-infected.

Steve
 
Leslie,

Click Start, Run and enter REGSVR32 WINTRUST.DLL Then try the update
again. And please note, that there are new variants of older virus's that
the AV scanners are not catching yet.
 
Leslie,



Hi, I hope I can help you here. Since you are recieving the "Cryptographic
Service" error, you need to download, but not install, the patch from
Microsoft regarding the blaster worm. If you have not done this yet, go to
www.microsoft.com/downloads and click on the link at the top regarding the
critical patch for the Blaster worm. On the right hand side of the page in
the gray box talking about the Blaster Workm critical patch, you will see an
underlined "download" link. Click on this link. Select "Save" when
prompted and save this link to your desktop. Don't load this yet! NOTE:
If your machine is rebooting every 1-5 minutes and you don't have enough
time to do the above steps, click Start then Run from the Start Menu, then
type in the box "shutdown -a", then hit OK. This should halt the rebooting
problem temporarily.



Now, that you have the patch on your desktop, you can tackle the
Cryptographic Service Error. You can go to http://www.wontfix.com/ and
select "fix.bat". This will rebuild your catalog entries. If you are asked
to reboot your system, do so.



After running this batch file, you can proceed with the downloaded patch
that is on your desktop. Look for the file name
"WindowsXP-KB823980-x86-ENU.exe".



Best Regards,

Stacy



Please note I cannot respond to e-mailed questions.
Please use respond to this thread to let me know if the steps and
suggestions helped you to resolve the issue.



Disclaimer:

This posting is provided "AS IS" with no warranties, and confers no
rights.
 
Stacy,

Re-registering Wintrust.dll solves it for most, and then there are a batch
of other DLL's that a few user's have reported as having worked for them.
The "shotgun" approach that fix.bat uses, isn't necessary in the majority of
cases.
 
Back
Top