- Location
- Aransas Pass, Texas
Other than ragging on ya because you did not keep your Windows box updated..... Two methods below. At your own risk..
CTL+ALT+DEL ALT T and see if msblast.exe is running. If it is, kill it. Run the patches/Windows updates posted elsewhere in this forum, then reboot. Should be fine.
OR
how to fix:
How To Secure From RPC and MSBLAST worm:
By thelinuxguy
1.)
Go to start -> search and search your entire computer for msblast.exe. Most likly it will be hiding in winnt/system32. Delete that file!
2.)
open regedit, and backup!
browse to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
DELETE the entry windows auto update"="msblast.exe
3.)
Close Regedit and install one of these patches:
windows xp
http://download.microsoft.com/downl...980-x86-ENU.exe
windows 2000
http://download.microsoft.com/downl...980-x86-ENU.exe
currently there is no patches for windows 2003
3.)
in windows xp & 2003:
go to your cmd prompt and do:
sc config RpcLocator start= disabled
in windows 2000 you have to go to administrative tools an then to services and disable the service
remore procedure call (RPC) locator
4.)
restart your pc
CTL+ALT+DEL ALT T and see if msblast.exe is running. If it is, kill it. Run the patches/Windows updates posted elsewhere in this forum, then reboot. Should be fine.
OR
how to fix:
How To Secure From RPC and MSBLAST worm:
By thelinuxguy
1.)
Go to start -> search and search your entire computer for msblast.exe. Most likly it will be hiding in winnt/system32. Delete that file!
2.)
open regedit, and backup!
browse to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
DELETE the entry windows auto update"="msblast.exe
3.)
Close Regedit and install one of these patches:
windows xp
http://download.microsoft.com/downl...980-x86-ENU.exe
windows 2000
http://download.microsoft.com/downl...980-x86-ENU.exe
currently there is no patches for windows 2003
3.)
in windows xp & 2003:
go to your cmd prompt and do:
sc config RpcLocator start= disabled
in windows 2000 you have to go to administrative tools an then to services and disable the service
remore procedure call (RPC) locator
4.)
restart your pc