RPC

[David Sunn]

I encounter the RPC error and I read the messages posted on this group. I downloaded and used the W32.blaster removal tools from BigBlackGlasses and Symantac, but both found none of infected. What's the matter?

Btw, I now get rid of the error by enable the XP's firewall.

TIA for any guides.

[Jupiter Jones [MVP]]

David;
Make sure you perform ALL steps:
You most likely have a worm W32.Blaster.Worm
DISCONNECT the subject computer from any network IMMEDIATELY.

Install or enable a firewall IMMEDIATELY:
http://support.microsoft.com/?kbid=283673

VERY IMPORTANT to repair, closing ports is NOT enough.
Download the appropriate patch referenced in Ron Martessl article below.
You may need to do this at an uninfected computer and burn to CD or save on floppy.

This is the IMPORTANT fix by Ron Martell:
http://www.bigblackglasses.com/Article.aspx?Article=342

Also see:
http://isc.sans.org/diary.html?date=2003-08-11

After this is resolved prevent similar occurrences by installing ALL Critical Updates from Windows Update.
Keep antivirus up to date and run at least weekly.
Install or enable a firewall.

--
Jupiter Jones [MVP]
An easier way to read newsgroup messages:
http://www.microsoft.com/windowsxp/pro/using/newsgroups/setup.asp
http://dts-l.org/index.html


"David Sunn" > wrote in message ...
I encounter the RPC error and I read the messages posted on this group. I downloaded and used the W32.blaster removal tools from BigBlackGlasses and Symantac, but both found none of infected. What's the matter?

Btw, I now get rid of the error by enable the XP's firewall.

TIA for any guides.

[David Sunn]

Thanks, Jones. I have followed all the steps you advised.
"Jupiter Jones [MVP]" > wrote in message ...
David;
Make sure you perform ALL steps:
You most likely have a worm W32.Blaster.Worm
DISCONNECT the subject computer from any network IMMEDIATELY.

Install or enable a firewall IMMEDIATELY:
http://support.microsoft.com/?kbid=283673

VERY IMPORTANT to repair, closing ports is NOT enough.
Download the appropriate patch referenced in Ron Martessl article below.
You may need to do this at an uninfected computer and burn to CD or save on floppy.

This is the IMPORTANT fix by Ron Martell:
http://www.bigblackglasses.com/Article.aspx?Article=342

Also see:
http://isc.sans.org/diary.html?date=2003-08-11

After this is resolved prevent similar occurrences by installing ALL Critical Updates from Windows Update.
Keep antivirus up to date and run at least weekly.
Install or enable a firewall.

--
Jupiter Jones [MVP]
An easier way to read newsgroup messages:
http://www.microsoft.com/windowsxp/pro/using/newsgroups/setup.asp
http://dts-l.org/index.html


"David Sunn" > wrote in message ...
I encounter the RPC error and I read the messages posted on this group. I downloaded and used the W32.blaster removal tools from BigBlackGlasses and Symantac, but both found none of infected. What's the matter?

Btw, I now get rid of the error by enable the XP's firewall.

TIA for any guides.