att'n Rick "Nutcase" Rogers

  • Thread starter Thread starter Charles Swenson
  • Start date Start date
C

Charles Swenson

Saw your response to Lee about multiple updates of file 819696 .
I'm having the same problem with the security update ms03-026 for the
blaster worm .

I turned off the automatic windows update , deleted ( at least sent to the
recycle bin temporarily) the windows update.log , rebooted , went to the
windows update site and there the file was to be downloaded and installed
again , although it showed having been installed successfully 8 times over
the past few days. I let it reinstall again , rebooted , went back to the
windows update site and there it was wanting to be installed again , still
showing being installed successfully now 9 times . Reactivated automatic
windows update and as I am typing this message I get another windows update
alert in the task bar for the same ms03-026 to be installed . What
gives , what can I do to resolve this . When security updates themselves
fail , where is secutity? Any help will be greatly appreciated

Thanx

Chas
 
1. Click Start, Run and then type: shutdown -a

This prevents the system from automatically restarting long enough
for you to download and install the Microsoft security update.

2. Click OK.
3. If the "shutdown -a" command fails to keep the computer from
restarting, use the following steps:

a. Click Start, Run, and then type: services.msc

A Services window appears.

b. Click OK.
c. Double-click Remote Procedure Call (RPC) and select the
Recovery tab. Be careful to not use the Remote Procedure Call
(RPC) Locator item.
d. Set the First Failure, Second Failure, and Subsequent Failures
items to Take No Action.
e. Click OK to apply the settings.

4. Install the latest critical updates using Windows Update. For more
information, go to the following Web sites:

* Microsoft's Security Bulletin: MS03-0266:

http://tinyurl.com/is2b

-or-

http://www.microsoft.com/downloads/details.aspx?FamilyID=2354406c-c5b6-44ac-
9532-3de40f69c074&displaylang=en


5. Remove the worm using your antivirus software. Do this by
attaining the latest virus definitions and then performing a scan.
For more detailed information go to the following Web sites:

* McAfee's VirusScan Web page on the W32/Lovsan.worm virus:

http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100547

* Symantec's Norton AntiVirus Web page on the 32.Blaster.Worm
virus.

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.htm
l

NOTE: Clicking the links may give an error indicating it is
invalid. If this occurs, copy the portion of the address
on the second line and paste it at the end of the address
showing in your browser.

If all went well, the computer is now clean and protected. If
these steps did not resolve the problem, contact Microsoft and your
anti-virus software vendor for additional assistance.


6. If you used the "services.msc" command (as explained above in
Step 3) to prevent your computer from restarting, restore your RPC
recovery settings to their original state as follows:

a. Click Start, Run, and then type: services.msc
b. Click OK.
c. Double-click Remote Procedure Call (RPC) and select the
Recovery tab. Be careful to not use the Remote Procedure Call
(RPC) Locator item.
d. Set the First Failure, Second Failure, and Subsequent Failures
items to Restart the Computer.
e. Click OK to apply the settings.


NaresH KumaR
 
Naresh

I do not have the worm , my computer is not automatically rebooting , the
computer is working perfectly normal , boots normal , shuts down normal ,
the only problem is windows update just wants to keep installing ms03-026
although it says it has successfully installed 9 times already.
Thanks anyway but I believe I misstated or you misinterpretated the problem.


Chas
 
Thanks again for your response , I have learned at the windows update
newsgroup that this is a recognized problem by Microsoft and that it will be
rectified by Thursday morning , there is also an immediate patch at
http://www.kellys-korner-xp.com/xp_tweaks.htm
line 266 that has fixed the problem for me.

Chas
 
Back
Top