Possible Blaster/ Remote Procedure Call issues

[bpurser]

Got a notification from Norton of a Blaster infection. Thought it was cleaned, but now on the web, system halts and says shutting down due to remote procedure call halting unexpectedly...any thoughts? I am on vacation and don't have all my stuff,.....help

 

[carrr]

You may have cleaned it, but did you throw the patch in while you were at it?

http://www.microsoft.com/downloads/...6c-c5b6-44ac-9532-3de40f69c074&displaylang=en

 

[paparazi]

We learnt very quickly over a day and a half the right and wrong to use the tool and patch.
You must turn off system restore, before using the search and destroy Symantec tool otherwise the worm is not properly elliminated.
You are strongly advised to turn on XP's built in firewall.
Use Microsofts security patch
Update your XP critical updates and virus protection.
Bye Bye Blaster. Martin

Replying helps further our knowledge, without comment leaves us wondering.

 

[bpurser]

Thanks,folks--you guys (or girls) rock. One prob I've had is that usually I get bumped long before I can dl stuff over a dial-up...got the updated virus defs, and am downloading the sec. patch as we speak. also found the welchia (sp??) worm, think I took care of that.

Am having some compatibility probs with the XP firewall, but will muddle through that.

Again, many thanks--

BTW, how do I turn off system restore??

Ben

 

[greyted]

Open Control Panel
Double click System --> click System Restore Tab
Check Turn off System Restore box.
or
Start--->All Programmes--->Accessories--->System Tools--->
open System Restore
click System Restore Settings
click System Restore tab
check Turn Off System Restore box.

Turn System Restore back on when you have finished.

HTH

Ted

"The difference between a misfortune and a calamity is this: If Gladstone fell into the Thames, it would be a misfortune. But if someone dragged him out again, that would be a calamity."
Benjamin Disraeli.

 

[bpurser]

AWESOME, AWESOME,AWESOME.

Looks like we're all fixed up. Many many thanks to all of you....

Ben

 

[greyted]

You are welcome Ben.



Ted

"The difference between a misfortune and a calamity is this: If Gladstone fell into the Thames, it would be a misfortune. But if someone dragged him out again, that would be a calamity."
Benjamin Disraeli.

 

[Foldedwings]

My Son-in-laws machine has worm/spybot that is a variant of the Blaster worm. His windows XP machine runs very slow. I ran the fix “fixblast.exe” and it couldn’t find any virus. However when I run VNG antivirus it says there is a virus (worm/spybot) infecting iexplorer and it cannot be quarantined. Any ideas on how to get rid of it?

 

[bcastner]

FoldedWings,

Whatever it is, the virus is not msblast.

Try all of these: Spybot Search and Destroy, AdAwre, and Hijack This!

http://www.spywareinfo.com/articles/hijacked/#removal

 

[acetylyne]

Foldedwings,

check out this website, and see if you are infected with either of these variants

http://security.msu.edu/cgi-bin/index.pl?dcom.html

good luck,
Josh

 

[Foldedwings]

Wow, that was a fast reply! Thanks for the info. I use SpybotSD on my machine and will put it on his. I thought of trying it but did not consider the possibility that this program could fix a worm. Of course VNG antivirus may not have the ability to differentiate between a spyware program and a worm (Unless spyware could be considered a worm.).

=Jp=