Re-installing XP Pro

  • Thread starter Thread starter Bob G
  • Start date Start date
B

Bob G

After removing McAfee VirusScan (automaticaly and maually
removing anything with the word McAfee) and installing
Norton Antvirus 2003 I was left with an "NT Authority -
RPC" auto shutdown - counted down fron 1 min before
restarting - would come up any time from 1 min to 1 hour.
Tried everything and decided (regretably) to reload Win
XP - did the upgrade option as to not loose everything and
now I am left with no dailup networking. (cannot install a
new connection and original is gone) In addition when
starting windows get the error message that no page file
could set and windows is making a temp one - when looking
at it it is zero meg and will not change after manualy
making a new larger file.

Anyone know any tricks other then format, partition and re-
install??
 
Hi Bob,

It's a virus called blaster or lovesan. Information:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://www.pchell.com/virus/msblast.shtml
http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-039: A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious
Programs
http://support.microsoft.com/?kbid=824146

Problem is, you needed to install the patch BEFORE you got infected to avoid
it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone
 
Congratulations! You have been infected with Blaster! You need to End
Process on anything called blaster.exe, blast.exe and so on you can find,
and then before connecting to the internet again, you need to enable a
firewall. The one included with XP will suffice until you get a real one up
and running. You can Google for a removal tool to rid yourself of the
Blaster Worm.
 
Back
Top