RPC error/MSBLAST (Critical update)

[Harmony]

Originally posted by firefox
erm guys im not entirely shure that this is infact a virus...

A freind of miine who has an extensive experience recommends a low level format and then reinstall windows

It is a virus, Lord Riff Raff found this:

http://securityresponse.symantec.com...ster.worm.html

If it wasn't a virus, it'd be unlikely everybody would suddenlly be having the same problem.

[Chris FireFox]

well possibly not there is flaws in every system besides it could be a bad rip for what i know

[Daz]

My system is now free of this bloody thing, thanks Del Boy.

[Kha'alim]

Ah... what a great day to wake up, lets' kill some viruses!

On the microsoft site there is a patch for windows xp 32 bit and 64 bit. how can i tell which one mine is?

Edit: I dwownloaded the 32bit version, it freezes during install: tryes to create a restore point, but it never finishes.

[Daz]

Originally posted by Kha'alim
Ah... what a great day to wake up, lets' kill some viruses!

On the microsoft site there is a patch for windows xp 32 bit and 64 bit. how can i tell which one mine is?

Edit: I dwownloaded the 32bit version, it freezes during install: tryes to create a restore point, but it never finishes.

Mine froze too, try restarting, then try to install it again, should wiz straight trough.

Note : I've edited the first post of this thread and it now says how to get rid of the virus, instead of having to sift through this thread.

[johnny blaze]

I posted this before, Has it worked for anyone? http://www.microsoft.com/technet/tr...in/MS03-026.asp

[Daz]

Originally posted by [ForeverZero]
I posted this before, Has it worked for anyone? http://www.microsoft.com/technet/tr...in/MS03-026.asp

Well, after i did what Del Boy said, all the problems i had before had disappeared. But i did that security thing too just to make sure.

I even added it to the first post before also.

[johnny blaze]

Alrighty. Good to see that virus defeated. :D

[Deach]

which patch do i d/l, windows xp 32-bit or 64-bit? i wanna defeat this before it defeats me

Edit: i installed the 32-bit patch, i think thats the right one, i should be free from this lil' bugger

[Del_Boy]

Originally posted by firefox
erm guys im not entirely shure that this is infact a virus...

A freind of miine who has an extensive experience recommends a low level format and then reinstall windows

Not being funny, but your friend sounds like he knows very little.

A Low Level Format is not something you should do to an IDE drive btw, your friend probably means a zero fill. This is indeed a real virus, it can propogate really well, which is all the criteria a succesful virus needs. Besides even after a reinstall the virus would still get you, because you'd still be in the same firewall free, and RPC buggy state you left it in. More info on LLFing an IDE drive here: http://freepctech.com/pc/001/007.shtml

It can also cause quite a few headaches for people who are not familiar with PCs.

The 32bit patch should be installed for all of you. If you had a 64bit chip and OS, believe me you'd know about it

[Deach]

ok thanks Del_Boy, i updated my virus defininitions just in case, this virus seems to be spreading fast

[Del_Boy]

If you need a firewall too then I'd recommend Zone Alarm, which you can get as a free DL, or Zone Alarm Pro which you can get as a 30 day trial from here:

http://www.zonelabs.com/store/content/home.jsp

Nice work btw Daz on putting the instructions in the first post why didn't I think of that, lol

[Shadowrider]

btw, does anyone know how this thing got infected to our system in the first place?
i never opened spam mails, or anything.

[johnny blaze]

I think it spreads through IRC.

[Del_Boy]

It doesn't spread through IRC. It spreads through a flaw in RPC that basically allows this exploit to load itself onto your machine.