Re: I am getting kicked off my internet connection

From: Taurarian (taurarian_at_hotmailNOSPAM.com)
Date: 08/18/03


Date: Mon, 18 Aug 2003 20:41:35 +1000


Hi John, see if this is relevant to you.

http://www.microsoft.com/security/incident/blast_faq.asp

Blaster Worm FAQ

1. CTRL-ALT-DELETE to bring up the Task Manager. Look for msblast.exe and
select it and End Process. This will stop the computer from shutting down.
It doesn't remove the worm.

To enable your firewall :
- Click Start
- Click Control Panel
- Double Click "Network Connections"
- Right-click on your Dial up Connection, then left click 'Properties'
- Left Click 'Advanced' Under "Internet Connection Firewall" tick the box
'Protect my computer and networking by limiting or preventing access to this
computer from the internet'
- Click Ok and Close the "network connections" box.
You can then connect to the Internet and download the Microsoft relevant
patch.

You could also try:
Start/Run then type in cmd
then type in : shutdown -a
Do this when the shutdown prompt appears.

W32.Blaster.Worm patch is available here:-
If you're not sure if the patch is installed it is No: 823980, Look in your
Add/Remove Programs for the Hotfix to see if it is installed otherwise
download it from here:
www.microsoft.com.au/blasterhelp
You must download and install the patch. In many cases, you will need to do
this before you can continue with the removal of the worm.
Because of the way the worm works, it may be difficult to connect to the
Internet to obtain the patch, definitions, or removal tool before the worm
shuts down the computer. It has been reported that, for users of Windows XP,
activating the Windows XP firewall may allow you to download and install the
patch, obtain virus definitions, and run the removal tool. This may also
work with other firewalls, although this has not been confirmed.

2. You can download the Symantec Removal Tool from here
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
or you can visit this site to assist in the removal of the worm
http://www3.ca.com/virusinfo/virus.aspx?ID=36265
To download ClnPoza.zip - a utility that cleans a local machine affected by
Win32.Poza,
http://www.kellys-korner-xp.com/xp_qr.htm#rpc
Panda Software also provides a free application especially designed to
detect and eliminate the Blaster worm and repair the damage that it may have
caused in affected computers. This utility is available for download at
http://www.pandasoftware.com/download/utilities/.
W32/Blaster-A disinfection instructions and FAQ
http://www.sophos.com/support/disinfection/blastera.html#3

If you have problems with downloading/installing the patch.
3. http://www.updatexp.com/cryptographic-service.html
For information on the Cryptographic Services

"John Hession" <jhession@att.net> wrote in message
news:07d401c36569$51d1a0d0$a101280a@phx.gbl...
> Recently,(past several weeks), I have been receiving a MS
> message stating my system will shut down in 30 seconds.
> It states it comes from "NT Authority/System". Cannot
> stay on the internet for more than a few minutes.
>
>



Relevant Pages

  • Re: RPC ERROR
    ... > It doesn’t remove the worm. ... > W32.Blaster.Worm patch is available here:- ... > You must download and install the patch. ... > patch, obtain virus definitions, and run the removal tool. ...
    (microsoft.public.windowsupdate)
  • Re: Msblast
    ... It doesn't remove the worm. ... W32.Blaster.Worm patch is available here:- ... You must download and install the patch. ... Internet to obtain the patch, definitions, or removal tool before the worm ...
    (microsoft.public.windowsxp.security_admin)
  • Re: nt authoritysystem
    ... To stop shutdown, click Start, click Run and type: ... It doesn't remove the worm. ... You can then connect to the Internet and download the Microsoft relevant patch. ... Internet to obtain the patch, definitions, or removal tool before the worm shuts ...
    (microsoft.public.windowsxp.customize)
  • Re: computer shutdown
    ... It doesn't remove the worm. ... You can then connect to the Internet and download the Microsoft relevant ... W32.Blaster.Worm patch is available here:- ... Internet to obtain the patch, definitions, or removal tool before the worm ...
    (microsoft.public.windowsxp.security_admin)
  • Re: RPC security error is restarting my comp
    ... Yesterday while having looked at the microsoft support ... Is the original problem actually the worm which I have ... >install the patch mentioned above. ... >It is suggested that you first download the patch to your ...
    (microsoft.public.windowsxp.security_admin)