 |
||||
|
Patching Windows RPC / removing msblast.exe:
|
||||
 |
* IT-Works is not responsible for any damage resulting from any recommendations here | |||
 |
- Symptoms- computer restart after an error message referering to "RPC" and "NT Authority"
- Connect to the Internet, goto >Start>Run, type "shutdown -a" to stop the restarting - (Windows XP only) Enable Firewall on your internet connection - Download Microsoft's patch here - Download scanner/removal tool here - Restart in Safe mode (restart machine, press F8 repeatedly right before the 1st windows splash screen appears, you should get a black screen with many options including: Safe Mode, Safe Mode with Networking, and Restart Normally. Choose "Safe Mode") - (for Windows XP) disable system restore - Apply Microsoft patch - Run Symantec's scanner - Enable system restore - Restart - Apply all other critical updates from windowsupdate. Repeat at least once a month - Update your antivirus software Contact IT-Works if you need more assistance NEW** Trend Micro describes removal of the "winlogin.exe" worm now appearing on some systems after the RPC exploit |
|||
 |
||||
 |
||||
 |
||||
 |
||||
 |
||||
| Copyright 2003 IT-Works | ||||