RPC

  • Thread starter Thread starter sam
  • Start date Start date
Sam;
DISCONNECT the subject computer from any network IMMEDIATELY.

Install or enable a firewall IMMEDIATELY:
http://support.microsoft.com/?kbid=283673

VERY IMPORTANT to repair, closing ports is NOT enough.
Download the patch from the Windows Catalog.
http://support.microsoft.com/?kbid=323166
You want: 823980
You may need to do this at an uninfected computer and burn to CD or
save on floppy.

This is the IMPORTANT fix by Ron Martell:
http://www.bigblackglasses.com/Article.aspx?Article=342

After this is resolved prevent similar occurrences by installing ALL
Critical Updates from Windows Update.
Keep antivirus up to date and run at least weekly.
Install or enable a firewall.
 
Jupiter said:
Sam;
DISCONNECT the subject computer from any network IMMEDIATELY.

Install or enable a firewall IMMEDIATELY:
http://support.microsoft.com/?kbid=283673

VERY IMPORTANT to repair, closing ports is NOT enough.
Download the patch from the Windows Catalog.
http://support.microsoft.com/?kbid=323166
You want: 823980
You may need to do this at an uninfected computer and burn to CD or
save on floppy.

This is the IMPORTANT fix by Ron Martell:
http://www.bigblackglasses.com/Article.aspx?Article=342
Click to expand...

Do you know if it is possible to have the effects of this worm without
being infected with it? The reason I ask is that after reading all the
messages on this worm I tried to get the patch on a Windows XP Pro
machine. This machine had not been connected to the internet for about
a week before this. The first thing I did was go to Windows Update and
start scanning for updates. Part way through I had the crash everyone
is reporting.
I then downloaded the patch on a clean computer and applied it. I also
updated the virus definitions. Checking msconfig showed no sign of the
worm and the virus scanner found no trace of it.
 
Michael;
Thjere can be various symptoms.
In any case, follow the procedure and you can not go wrong.
 
Jupiter said:
Michael;
Thjere can be various symptoms.
In any case, follow the procedure and you can not go wrong.
Click to expand...
I did do this anyway and found no trace of the worm. It just seemed
weird that the machine acted like it had the worm the first time I
connected to the internet with it in over a week.
 
Back
Top