For those experiencing an RPC error in Windows XP

by **Buliwyf** » Mon Aug 11, 2003 8:22 pm

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

It may be this worm, which exploits the DCom service in XP

-ctrl-alt-supr for Task Manager
-kill process msblast.exe
-Start->run->regedit
HKEY_LOCAL_MACHINE->software->Microsoft->Windows->CurrentVersion->Run

Delete the entry pointing to msblast.exe

Delete msblast.exe from your system

Then download this patch from MS:
http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-026.asp

by **Killer Mike** » Mon Aug 11, 2003 9:25 pm

Thanks. Just did it. Seems to be working. Thanks for the important info.

by **Jeffro** » Mon Aug 11, 2003 9:36 pm

OMG!!! THANK YOU A LOT!!!!

I HAVE BEEN GETTING THAT A LOT LATELY!!!

BULI=My god, hero, lover...er i mean...

by **Cowgomoo** » Mon Aug 11, 2003 10:04 pm

thank you buli!!! i got that message every time i pulled up windows today before it even finsished booting, 4th try i got to install the program, seems to be working.

i did a system recovery cd...wahhhhhhhhhhhh, btw, thanks man, i owe you one

by **Evan** » Tue Aug 12, 2003 12:06 am

Funny.

Anyway, today I accidentally turned off SERVICES.exe, which is what the worm turns off, requiring a shutdown.

I though I had it before. Silly me.

by **Jeffro** » Tue Aug 12, 2003 12:19 am

32-bit patch or 64-bit...

I got the 32....hope that is in common with my xp :freak:

by **Sidekick Floppy** » Tue Aug 12, 2003 3:15 am

Thanx Buli! My server was infected and it was shutting down my client PC from time to time.

by **Ryan** » Tue Aug 12, 2003 6:28 am

Or see this thread here:

http://forums.powervs.com/showthread.php?s=&threadid=4454

by **[U.S.C] Amaryl** » Tue Aug 12, 2003 5:28 pm

buffff! thanks a lot guys I thought I got my computer crashed again and I would have to reformat my computer, since now I am running my pc from the hard disk second partition with win98.

by **(>Tool<)** » Tue Aug 12, 2003 5:48 pm

I virus scanned, searched for msblast, then downloaded the updates, everything looks clear and I never got that shutdown thing but damn, atleast 5 or 6 people i know where having that issue just yesterday.

by **Buliwyf** » Tue Aug 12, 2003 5:55 pm

Originally posted by Jeffro
32-bit patch or 64-bit...

I got the 32....hope that is in common with my xp

you 99.9% likely have 32 bit

by **Ryan** » Tue Aug 12, 2003 6:43 pm

Originally posted by (>Tool<)
I virus scanned, searched for msblast, then downloaded the updates, everything looks clear and I never got that shutdown thing but damn, atleast 5 or 6 people i know where having that issue just yesterday.

I believe there was big exploit push yesterday.

For those experiencing an RPC error in Windows XP

For those experiencing an RPC error in Windows XP

Who is online