RPC help, cant find msblast in files or registry

[EdO]

i was disabling programs from starting to improve
performance on Monday night, all the sudden i start
getting the shut down garbage so i figured it was
something i disabled, reenabled all, but still had
problem, so i figured sytem restore to the previous day.
The yesterday i find out about the worm so go home and
try to find the msblast in registry and files and cant
find. Virusscan is up to date and it cant find any virus
but i stil have the problem.
Any suggestions? Should i remove the registry
entry "windows update" even though it doesnt show the
added verbage showing the worm?
HELP pls.
thx
Ed

 

[purplehaz]

Here is some info:
To stop the rebooting, right click on the task bar, choose task manager,
processes tab, look for msblast.exe. Highlight it and click end process.
Then visit the sites below for the removal and patch info.

Norton Anti Virus
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

Network associates:
http://vil.nai.com/vil/content/v_100547.htm


Also make sure to follow the links to the Microsoft pages for the patch or
visit windows update for the patch after you remove it.


More info:

http://support.microsoft.com/?kbid=823980

 

[Dave - Freedonia]

Just because you had the RPC exploit run on your computer doesn't mean
you have the msblast virus. The person could have put other programs on
or deleted programs.

I have found many articles about how to use the exploit to ftp programs,
run Remote Assistance and even change user passwords.

 

[EdO]

There is nothing regarding the msblast anywhere, not on
task, or searching files, so i cannot do that.

 

[purplehaz]

If you don't find the virus or any of it's files/entries/services, then you
are probably ok. Just install the patch from the MS website.