blaster worm

[forrest yocom]

i would like to download the patch... unfortunently
windows xp home addition is not on the patch download
list. does anyone know if i use windows xp 32 bit
edition or windows xp 64 bit edition? mine is windows xp
home addition 5.1

allthough msblast is not running on my task manager, it
was recomended that i do the patch anyway, your imput is
greatly appreciated

thank you
forrest

[Chris Lanier]

Windows XP Home is 32Bit and the patch is offers on the page.

If the computer is constantly rebooting, quickly go to:
Start > Run and type: shutdown -a , and hit enter.

This should halt the rebooting problem.

"Go Offline after you download the patch and either print this info or copy
and paste it to word patch"

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=823980

Enable the windows XP Firewall
https://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/winxppro/proddocs/hnw_enable_firewall.asp

More info about the worm:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

Test your system
https://grc.com/x/portprobe=135

"forrest yocom" > wrote in message
...
> i would like to download the patch... unfortunently
> windows xp home addition is not on the patch download
> list. does anyone know if i use windows xp 32 bit
> edition or windows xp 64 bit edition? mine is windows xp
> home addition 5.1
>
> allthough msblast is not running on my task manager, it
> was recomended that i do the patch anyway, your imput is
> greatly appreciated
>
> thank you
> forrest

[Nicholas]

Forrest --

Here is a link to the patch to should in install:

Blaster Worm: Critical Security Patch for Windows XP (32-bit version)
http://microsoft.com/downloads/details.aspx?FamilyId=3D2354406C-C5B6-44AC=
-9532-3DE40F69C074&displaylang=3Den

--=20
Nicholas

-----------------------------------------------------------------------

"forrest yocom" > wrote in message:
...

| i would like to download the patch... unfortunently=20
| windows xp home addition is not on the patch download=20
| list. does anyone know if i use windows xp 32 bit=20
| edition or windows xp 64 bit edition? mine is windows xp=20
| home addition 5.1
|=20
| allthough msblast is not running on my task manager, it=20
| was recomended that i do the patch anyway, your imput is=20
| greatly appreciated
|=20
| thank you=20
| forrest

[Tink A.]

My computer got to the point where the welcome screen
wouldn't even come up on anymore..after the shutdown
message had appeared for a short while. I had to do a
System Recovery, as that info was on a area of the hard
drive that was partitioned. The System Recovery seemed to
be fine..it took about 30 minutes to do it, but it seemed
to work, except at the very end, on the screen that
congratulated me for finishing the process of reloading
Windows XP, etc....when I clicked on the Finish button,
the hourglass just kept rolling forever. I never could
get the computer to come back up into the welcome screen,
or get the hourglass to go away? Does anyone have any
suggestions as to why this is doing this?

>-----Original Message-----
>Windows XP Home is 32Bit and the patch is offers on the
page.
>
>If the computer is constantly rebooting, quickly go to:
>Start > Run and type: shutdown -a , and hit enter.
>
>This should halt the rebooting problem.
>
>"Go Offline after you download the patch and either print
this info or copy
>and paste it to word patch"
>
>MS03-026: Buffer Overrun in RPC Interface May Allow Code
Execution
>http://support.microsoft.com/?kbid=823980
>
>Enable the windows XP Firewall
>https://www.microsoft.com/technet/treeview/default.asp?
url=/technet/prodtechnol/winxppro/proddocs/hnw_enable_firew
all.asp
>
>More info about the worm:
>http://securityresponse.symantec.com/avcenter/venc/data/w3
2.blaster.worm.html
>
>Test your system
>https://grc.com/x/portprobe=135
>
>"forrest yocom" > wrote in message
...
>> i would like to download the patch... unfortunently
>> windows xp home addition is not on the patch download
>> list. does anyone know if i use windows xp 32 bit
>> edition or windows xp 64 bit edition? mine is windows
xp
>> home addition 5.1
>>
>> allthough msblast is not running on my task manager, it
>> was recomended that i do the patch anyway, your imput is
>> greatly appreciated
>>
>> thank you
>> forrest
>
>
>.
>

[Todd]

As I understand, you have received the following error messages when using
your computer:

"This system is shutting down. Please save all work in progress and log off.
This shutdown was initiated by NT Authority/System."

"Windows must restart because the Remote Procedure Call (RPC) service
terminated unexpectedly."

If I have misunderstood, please feel free to let me know.

This is a known security issue which was first found on July 15. There is
currently an Internet Worm that is taking advantage of this security issue.
Microsoft published the patch to fix this issue on July 16 for all of the
affected systems on our web site. For more information, please refer to the
following page:

http://www.microsoft.com/security/security_bulletins/ms03-026.asp

The resolution to this issue is to clean the worm from your system and
install the patch mentioned above. You can find a link below to install the
patch for Windows XP.

It is suggested that you first download the patch to your system so you can
install the patch immediately after cleaning the system and before you
reconnect to the Internet or network.

In some cases this Worm can cause your system to reboot and you may have
difficulties downloading the patch. In those cases you need to turn off
some ports that the virus uses by blocking them with Firewall software. The
ports that may need to be blocked are as follows:

TCP/UDP Port 135

TCP/UDP Port 139

TCP/UDP Port 445

*Note: Port 69 (TFTP) and TCP port 4444 are also in use by this worm and
should be blocked.

The Internet Connection Firewall that comes with Windows XP will block these
by default once it is enabled. To enable the Internet Connection Firewall
that comes with XP do the following:

1. In Control Panel, double-click "Networking and Internet Connections",
and then click Network Connections.

2. Right-click the connection (your internet connection) on which you would
like to enable ICF, and then click Properties.

3. On the Advanced tab, click the box to select the option to "Protect my
computer or network".

4. If you want to enable the use of some applications and services
through the firewall, you need to enable them by clicking the Settings
button, and then selecting the programs, protocols, and services to be
enabled for the ICF configuration.



To Download the patch and remove the Worm do the Following:

Step 1:

Download patch:

1. Download the patch for your system from the link shown below these
steps.

http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

Clean the worm from your system you should do one of the following:

2. Run your Antivirus software with an updated definitions.

and

Customers should use some of the online removal tools located at:

§
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

§ http://vil.nai.com/vil/stinger

§ http://www.trendmicro.com/download/tsc.asp

Install the patch:

3. Run the patch from the location you downloaded it to in step 1.

At the same time, we suggest you often go to
http://www.microsoft.com/security/ and install all critical updates and
service packs from the Windows Update website:
http://windowsupdate.microsoft.com/. In this way, your system is always
protected from the potential security issues.

Once again I would like to thank you for contacting Microsoft Online Support
Service. I am going to go ahead and close this case.

If you require further assistance with this issue, simply respond with any
supplemental information. The case will then be reopened and forwarded back
to me for follow-up.

If you have additional technical questions or concerns not related to this
specific issue, please open up a new case. For your convenience I have
included the following link:

http://support.microsoft.com/support/webresponse.asp

Again, thank you for choosing Microsoft.

Best Regards,

-Todd

This posting is provided "AS IS" with no warranties, and confers no
rights

Please note I cannot respond to e-mailed questions.
Please use these newsgroups to let me know if the suggestions resolved the
issue.







"forrest yocom" > wrote in message
...
> i would like to download the patch... unfortunently
> windows xp home addition is not on the patch download
> list. does anyone know if i use windows xp 32 bit
> edition or windows xp 64 bit edition? mine is windows xp
> home addition 5.1
>
> allthough msblast is not running on my task manager, it
> was recomended that i do the patch anyway, your imput is
> greatly appreciated
>
> thank you
> forrest