Re: HOW TO REMOVE THE RPC VIRUS

From: Tom Pepper Willett (tompepper_at_mvps.org)
Date: 08/13/03 

Date: Wed, 13 Aug 2003 07:37:30 -0500

Or, you could download the free removal tool from www.norton.com and save
all those steps and hassle.

Tom

"maureen" <taylorfrench@sbcglobal.net> wrote in message
news:0ae801c36151$89688700$a101280a@phx.gbl...
| YOU ARE AWESOM PAUL!!!! I'm still not sure needed to
| download the anti-virus software. I still found
| MSBLAST. Properties indicates install at 11:00 LAST
| NIGHT! I copied your solution & may send to my ISP
| provider tomorrow--neither they nor Microsoft have
| contacted me yet! AT THE VERY LEAST solutions folks like
| you should be provided free internet service for the
| services you "amateurs" perform. THANK YOU!!!!!!!!!!!!!!
| >-----Original Message-----
| >Hi folks,
| >
| >FIRST THINGS FIRST...I know you don't have a lot of time
| >before your RPC window pops up and shuts you down, but
| >because you will be disconnecting from the internet for
| >part of this procedure, read this fast and REMEMBER!
| >
| >1) UNPLUG YOUR MODEM. This should allow you free time
| >to make some changes to your computer (after you reboot,
| >if your RPC window pops up and requires you to do so).
| >
| >2) When you are not connected to the internet, go
| >to "Control Panel," "Performance and
| >Maintenance," "Administrative Tools," open "Services,"
| >right click on "Remote Procedure Call,"
| >click "Properties," click the "Recovery" tab, at "First
| >Failure," "Second Failure," and "Subsequent Failures,"
| >select "Take No Action."
| >
| >3) Turn on your modem and reconnect to the internet.
| >
| >4) You've probably run out of time reading this before
| >your computer has rebooted, so get back to this message
| >and read from step 5 on. At this stage, you are still
| >infected with the msblast virus, but your computer will
| >not reboot on you.
| >
| >5) This virus is very clever and has disabled several
| >buttons on the web and on your computer that would
| >otherwise allow you to disable it, so you've got to go
| >around the back door.
| >
| >6) From support.microsoft.com, download:
| > WindowsXP-KB823980-x86-ENU.exe
| >(this is for XP; there is a Windows 2000 version
| >also...try a search on the Microsoft Support
| >website...plugging in this file name should bring you to
| >the same page as the security patches for the other
| >Windows versions).
| >
| >7) Download and install.
| >
| >8) Reboot.
| >
| >9) Now you should be able to have a little more
| >functionality in your computer. If you havent' done so
| >already, enable your firewall:
| >"Control Panel," then "Network and Internet
| Connections,"
| >then "Network Connections," right click on your active
| >internet connection, select "Properties," click on
| >the "Advanced" tab, and check the box enabling firewall
| >protection.
| >
| >10) Now let's kill the virus. Go to:
| >
| http://housecall.trendmicro.com/housecall/start_corp.asp
| >It's a free antivirus detection and cleanup program.
| >
| >11) Run the program (this takes a long time). The
| >program should detect the msblast virus; it states that
| >it is non-cleanable. Click the "delete" button to
| delete
| >the virus.
| >
| >12) To be sure, run the Search program from your Start
| >menu. Search for "msblast.exe" Include all hidden files
| >and folders in your search. If you have been
| successful,
| >no files will appear.
| >
| >13) Congratulations! You're cured! Now download all
| the
| >security patches and updates that Microsoft bugs you
| >about everytime you boot your computer...I have been
| >ignoring it for months and this is what happened.
| >
| >(Hey Mr. Gates, you can pay me by cash, check, or charge
| >for consulting services offerred. You're welcome.)
| >
| >Let me know how it works out for you! Good luck!
| >
| >Paul
| >(A Graduate Student who managed to figure it out without
| >spending ridiculous money on tech support fees...this
| >goes out to my peeps)
| >
| >
| >.
| >