Re: please help
From: Thomas O'Grady [MSFT] (togrady_at_online.microsoft.com)
Date: 08/12/03
- Next message: Craig Farrel: "please help"
- Previous message: john ramsbottom: "Re: Super bar"
- In reply to: Philip: "please help"
- Next in thread: Craig Farrel: "please help"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 11 Aug 2003 16:25:52 -0700
someone in the
microsoft.public.security.virus newsgroup also said they got this and id'd
it as a virus with a new file appearing as msblast.exe. They quarantined
that file and updated all patches. you may need to do more.
One person's suggestion:
"This may be the sign that you have been compromised by a worm that exploits
the RPC hole recently identified in Windows.
You won't like this, but my advice is to unplug the system from the
internet, clean the system and restore from a known good backup, and update
the patches on this and all your other computers, making sure to check them
and do the same roll-back to a known good backup if you detect any hint of
tampering.
Told you that you wouldn't like it, sorry."
-- Thomas O'Grady, Security Business Unit Microsoft Corporation This posting is provided "AS IS" with no warranties, and confers no rights. "Philip" <phill_23@msn.com> wrote in message news:076f01c3605c$870008d0$a101280a@phx.gbl... > Dear sir, > After I have signed onto the internet a screen telling > me the system will be shutting down due to remote > procedure call has terminated
- Next message: Craig Farrel: "please help"
- Previous message: john ramsbottom: "Re: Super bar"
- In reply to: Philip: "please help"
- Next in thread: Craig Farrel: "please help"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
