PLEASE HELP ME:

[Iqbal Singh Kang]

I would be most grateful if someone could help me: I am
running Windows XP with a broadband connection, however I
have encountered the RPC virus, XP will not allow me to
download and install the patch unless I have at least
Service Pack one installed. However while trying to
download service pack one the RPC kicks in and reboots the
pc everytime.

I look forward to hearing peoples views.

 

[Jim Macklin]

As soon as you boot, press [ctrl-alt-del] and look at the
processes tab, stop the msblaster process. That should stop
the shutdown. Then turn your firewall on for the
connection.

Download the STINGER program from
http://vil.nai.com/vil/averttools.asp
Run Stinger and it will remove and repair found viruses.

Never go on-line, broadband or dial-up without a firewall,
whether you're patched or not. XP's firewall is adequate
but Zone Alarm has better features www.zonelabs.com free
version available.


"Iqbal Singh Kang" <[email protected]>
wrote in message
| I would be most grateful if someone could help me: I am
| running Windows XP with a broadband connection, however I
| have encountered the RPC virus, XP will not allow me to
| download and install the patch unless I have at least
| Service Pack one installed. However while trying to
| download service pack one the RPC kicks in and reboots the
| pc everytime.
|
| I look forward to hearing peoples views.

 

[purplehaz]

To stop the rebooting/shutdowns, right click on the task bar, choose task
manager, processes tab, look for msblast.exe. Highlight it and click end
process. Then turn on the xp firewall.

To turn on the firewall: control panel, network and internet connections,
network connections, right click your connection, properties, advanced tab,
check the protect my computer box. Do this as quickly as you can once the
desktop comes up. Then visit the sites below for the removal and patch info.

Symantec: removal info and removal tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

Also make sure to follow the links to the Microsoft pages for the patch or
visit windows update for the patch after you remove it.

http://support.microsoft.com/?kbid=823980

http://www.microsoft.com/security/incident/blast.asp

 

[Tim H.]

As soon as you boot, press [ctrl-alt-del] and look at the
processes tab, stop the msblaster process. That should stop
the shutdown. Then turn your firewall on for the
connection.

But the shutdown doesn't occur because they're infected! Stopping
msblast.exe won't prevent that from happening again. The reason they're
getting the shutdown message is because another PC that's infected is
sending data that makes RPC crash instead of performing the exploit.

Download the STINGER program from
http://vil.nai.com/vil/averttools.asp
Run Stinger and it will remove and repair found viruses.

Never go on-line, broadband or dial-up without a firewall,
whether you're patched or not. XP's firewall is adequate
but Zone Alarm has better features www.zonelabs.com free
version available.

Pfft! Never go online w/out A/V protection!

 

[Alex Nichol]

I would be most grateful if someone could help me: I am
running Windows XP with a broadband connection, however I
have encountered the RPC virus, XP will not allow me to
download and install the patch unless I have at least
Service Pack one installed. However while trying to
download service pack one the RPC kicks in and reboots the
pc everytime.

Boot, and immediately go to Control Panel - Admin Tools - Services.
Double click the Upper Remote Procedure Call (RPC) line, and on the
recovery page select 'Restart the Service against the 'First Failure,
and click Apply. Then for Second failure too.

Now go to Network Connections, r-click the connection you use,
Properties and on the Advanced page check the top box, to 'Protect with
the firewall'.

You can then go to
http://www.kellys-korner-xp.com/xp_qr.htm#rpc
and get the VBS file that tidies up - it also links to the patch to get
that