how did it go james?
Printable View
how did it go james?
How do you know if you have 32 or 64 bit XP?
^ Unless you have an Itanium or whatever the new Intel chip is called, you have the 32bit.
By the way, I installed the patch off MSFT's website and then deleted the file C:\Windows\System32\MSBlast.exe and everything was fine again.
Here is the answer, please read the thread:
Firewalls will work, sure. HOWEVER, the PATCH for this whole mess is at: http://lsd-pl.net
Everyone: Please install this patch if you are running XP, 2000, or NT4. Please inform any friends and family that may be running those operating systems to install the patch. This thing will only get worse, and I can guarantee you that a nastier variation will come out sooner rather than later.
/me waits for CKA to come in and mention his "manly" OS, BSD...
Thanks Abobo! I was having the same problem too, & that patch fixed it right up. You are a life saver!
JM
My PC was infected with this damn worm yesterday. It added the "msblast" worm to my pc and I couldn't figure out what it was. Whats worse was that once I went online it would trigger the RPC/NT Authority error just 2 minutes thus rendering any download of a patch fruitless. So I just received the patch from a friend on disk and reformatted my pc and installed the patch. So far so good.
This morning all the news channels mentioned this worm. Three of my friends had this crap yesterday too...its spreading like wildfire.
Here's an article regarding "msblast" from cnet:
worm article
we were not alone definitley - here's an article from cnn.com
http://www.cnn.com/2003/TECH/interne....ap/index.html
Now i'm going to go reward myself and buy the futurama box set season 2 *loud frank costanza voice* "What do you think about that?!"
Three quickies:
1) The RPC update should be on Windows Update. PLEASE make sure your system is current on all patches. Also run a firewall if you can; XP comes with one, and you can download free ones like Zone Alarm.
2) If you're experiencing the system reboot cycle, you CAN stop it; in the space of time you're given when the warning comes up, go to Start -> Programs -> Accessories -> Command Prompt (or Start -> Run), and run "shutdown -a now". That should stop the shutdown sequence.
3) If you are infected, you can get a cleanup tool from http://securityresponse.symantec.com...oval.tool.html . I've already had to use the tool on one laptop, and it worked fine.
Hope this helps...
Or, you can go to Start--->Settings-->Control Panel-->Administrative Tools-->Services - double click the Remote Procedure Call and change what it does when service fails. You can't access a lot of ish when the service is down (Hotmail, and a few sites, for instance), but you can download the patch in peace. If you have a problems accessing patch sites with RPC disabled, turn RPC on, bookmark the site, restart, then disable RPC and go to the bookmark.