Re: help

From: Andrew Z Carpenter [Newsgroup Groupie] (azc_at_FILTERcirencester.ac.uk)
Date: 10/08/03


Date: Wed, 8 Oct 2003 18:02:18 +0100


> "Ali SArai" <alisarai2@yahoo.com> wrote in message
> news:08c901c38db4$0413c4e0$a001280a@phx.gbl...
>
> I just found out this one but i'm now sure if it's a
> virus or not.
>
> When i connect to the internet and play for a while,
> another window came up counting down 1 minute. It says on
> the window that ... save your unfinished work etc.
> something like this and it says that this problem happens
> because "Remote Procedure Call (RPC)" is terminating
> unexpectedly.
>
> Does any one know if this is a kind of virus?
> If any one has any more information can you please help
> me... please email me.... thank you so much.

If the answer is just emailed to you, then anyone else
coming to this group to look for an answer to the same
question would not be able to find one. Anyway..

Your computer is vulnerable to an exploit which was released
in August of this year.

There are several things you need to do.

First, before connecting to the internet, you need to enable
your Internet Connection Firewall. See here:
http://www.microsoft.com/windowsxp/pro/using/howto/networking/icf.asp

Once you have connected to the internet with the use of the
firewall, you should no longer recieve the message. However,
it does not mean the problem is fixed. I recommend that you
then download and install ZoneAlarm Basic, downloadable free
from http://www.zonelabs.com. ZoneAlarm gives you the ability
to block any program you specify from being allowed to access
the internet. This is good, because although you may not
realise it yet - you have a virus on your computer. We'll get
to that in a minute.

Second, you need to patch the vulnerability that is present
on your computer which allows the worm to infect you. Open
up Internet Explorer, click the Tools menu, and choose
Windows Update. Once there, click Scan Now. The program will
scan your computer to see what updates are needed, and give
you the chance to apply them. I recommend you apply all Critical
updates, and all Windows XP updates.

Once you have done that, and ensured that it no longer offers
you any critical updates, you can begin to clean up the virus(es)
that currently inhabit your computer.

If you already have antivirus software, you need to update it.
If you do not have antivirus software, or can no longer update
it, you can get AVG 6.0 for free at http://www.grisoft.com

Perform a full scan of your computer, and clean any files that
are infected.

Windows Update should be checked every few weeks to ensure you
are kept up to date with all relevant patches. Your antivirus
software should be updated every few days.

If you have any trouble with any of the above, please post back
here and we'll try to help.

Good luck!

-- 
AZC
MVP


Relevant Pages

  • Re: Startup problems, corrupted system files, black screen and updates
    ... about a minute of confusion, a Windows Bubble popped up in the corner, saying ... multiple internet windows open. ... the constant corruption of files and failure to update. ... The said virus opened countless of hidden windows and processes, ...
    (microsoft.public.windows.mediacenter)
  • Re: Startup problems, corrupted system files, black screen and updates
    ... about a minute of confusion, a Windows Bubble popped up in the corner, saying ... multiple internet windows open. ... the constant corruption of files and failure to update. ... The said virus opened countless of hidden windows and processes, ...
    (microsoft.public.windows.mediacenter)
  • Re: What right allows full access?
    ... Invest in a good Antivirus software. ... internet faster" and "remember you passwords" and "protect your system from ... If you are using Windows XP, you could download and install some ... >> been blocked and an new permissions inheritance ...
    (microsoft.public.windowsxp.security_admin)
  • Re: shutting down
    ... please contact Microsoft at 1-866-PCSafety. ... Windows XP Professional ... participating in the Microsoft Virus Information Alliance, ... sluggish or your Internet connection is slow ...
    (microsoft.public.scripting.virus.discussion)
  • I think I have been hijacked.
    ... I am running windows xp on my Compaq Presario and Toshiba laptop, ... An internet connection appears to have been added through a USB. ... R - Registry, StartPage/SearchPage changes ... Fixed crashing bug on certain Win2000 and WinXP systems at O23 listing ...
    (microsoft.public.windowsxp.security_admin)

Quantcast