RPC help

[Betauser]

can anyone tell me why we r getting a RPC and it shuts down about 50 seconds.. is there anyway i can disable this? any info would be great.

 

[BillLeeLee]

Sounds like you have Blaster worm or any of its offshoots.

 

[Betauser]

anyway i can get rid of that?

 

[MOC]

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MSBLAST.A

 

[djnes]

Once you log in, run shutdown - a from a DOS Prompt then follow the directrons on removing patches. Take this as a lesson to run Windows Update and install critical updates.

 

[BillLeeLee]

Run a virus scan with all updates.
Symantec has a blaster removal tool:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

Most likely your comp might restart before you have a chance to do anything, so if you run Win XP, enable the Windows Firewall (or any firewall you might have). You can also disable RPC for the moment (I forgot how to go about doing this, I'll look into it if you need) so that the worm can't exploit it.

Afterwards, I suggest you grab the updates from Microsoft (dunno which one it is that prevents blaster from affecting you, I'll have to look into that too).

 

[Betauser]

thnx guys, but the thing is we are in dial up so i need to shut down the mservice.msc i guess.

 

[Betauser]

ok, so i ran this:

http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-039.asp

is there anything else i need to do?