Re: blaster worm........

From: Br0wnbear (brownbearat_at_canadadotcom)
Date: 10/01/03 

Date: Tue, 30 Sep 2003 22:14:08 -0400

Nonna

Use shutdown -a in the Start > Run box to abort the shutdown.
In Services, select RPC and right click to access its properties. On the
Recovery page, change "Restart the computer" to "Do nothing."
Download and install the patch. Download and run the tool of your choice to
remove Blaster. When all is back to normal, go back and reset RPC to
"Restart the computer."

OR

Use a different computer to download the patch. Copy the download to
removable media (floppy disk, CDR, CDRW, etc) so that you can install the
patch on the infected machine.

Outline of recovery steps and useful links to help tools can be found here:
What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

HTH
jbrown

"nonna" <goodun@tracylawrence.com> wrote in message
news:1d1001c387be$739fbbd0$3501280a@phx.gbl...
> Can someone PLEASE tell me how to go through the steps of
> getting rid of the blaster worm!!! How can you even do
> step one when your computer keeps signing off?????

Relevant Pages

  • Re: LSASS.EXE
    ... Download the patch. ... following when you get the shutdown message. ... You can also scan the system using the below multi AV Command Line Scanner front end utility ...
    (microsoft.public.windowsxp.general)
  • Re: lsass.exe help (might be sasser virus)
    ... | firewall and I use AVG as my main antivirus scanner. ... If you are getting the following NT AUTHORITY\SYSTEM shutdown message... ... FireWall to allow it to download the needed AV vendor related files. ... This will bring up the initial menu of choices and should be executed in Normal Mode. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: RPC terminated Unexpectedly, shutdown in 60 seconds
    ... First let me say your roommate needs to go to a store and BUY Windows XP. ... Scroll down to "Remote Proceedure Call (RPC)" NOT Locator ... Download AdAware & Spybot S & D: ... Run the Security Patch you downloaed earlier. ...
    (microsoft.public.windowsxp.general)
  • Re: NT Authority / System Shutdown
    ... Scroll down to "Remote Proceedure Call (RPC)" NOT Locator ... Download AdAware & Spybot S & D: ... Run the Security Patch you downloaed earlier. ...
    (microsoft.public.windowsxp.basics)
  • Re: xp is *NOT* flushing disk cache before shutdown
    ... If you do not have an XP CD, you can download this application ... Check for the latest drivers for your hardware, ... > shutdown until the drive completely writes everything. ... > drives shut down the instant that's done, ...
    (microsoft.public.windowsxp.general)
Loading