Hi April - The mind boogles - it's hard to believe that you've hear nothing
about the MS Blaster worm that has infected an estimated 500,000 computers
world wide! But, evidently not, since that appears to be what you have.
First, so that you can stay booted up long enough to follow the rest of the
directions:
Go to Start/Run and type in: services.msc. Scroll down to Remote Procedure
Call (RPC)/Recovery/First Failure/Restart the Service (instead of Restart
the Computer which it probably is now).
Now, download this script and execute it (courtesy of Kelly site here:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc):
http://www.kellys-korner-xp.com/regs_edits/msblast.vbs After it's cleaned
up your machine of any of the five currently know variants of this worm, it
will ask you if you want to download the necessary patch to keep from being
re-infected. Say yes and then download and install this patch, 823980,
directly available also here:
http://tinyurl.com/ir5h For safety's sake,
after you install the patch and re-boot, RE-RUN the msblast.vbs file to
clean up any infection that you just might have gotten between your first
clean up and installing the patch.
Note that the MSBlast worm is not the only thing that can attack your
machine in this particular fashion, and it's important that you install a
firewall which blocks certain specific ports. There's good information here
about this worm and a specific section about obtaining and installing a
firewall:
http://www.microsoft.com/security/incident/blast.asp#steps
Follow these directions, and post back please with your results/problems.
--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP
In
