PsFantasy.com Forums - View Single Post

happy_doughnut · Aug 18th, 2003, 02:19 AM

I haven't gotten this worm, thankfully.

It's weird how it doesn't use the normal download/email way of spreading, but more of a backdoor operating system function.
I guess that continually sending connection requests to windowsupdate.com to make it look like people are actually requesting updates, and thus rendering the server useless since it's really just millions of fake requests to tie up connections to it, is one of the things that is hindering people from being able to get a fix for it.

Here's one fix I know of :

Click start, then right click my computer click manage
Go to services
double click on both RPC
go to recovery
change the 3 drop downs from restart to take no action

Get the patch and install
https://microsoft.com/downloads/deta...&displaylang=en

delete key in reg edit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Run "windows auto update"="msblast.exe"

Restart system, then have the customer go to antivirus vendor and have them update, then do the rest of the security updates from Microsoft

Yep.

Aug 18th, 2003, 02:19 AM	#16
happy_doughnut just a rolling stone Joined: Apr 2002 Location: of what? Posts: 1,561	I haven't gotten this worm, thankfully. It's weird how it doesn't use the normal download/email way of spreading, but more of a backdoor operating system function. I guess that continually sending connection requests to windowsupdate.com to make it look like people are actually requesting updates, and thus rendering the server useless since it's really just millions of fake requests to tie up connections to it, is one of the things that is hindering people from being able to get a fix for it. Here's one fix I know of : Click start, then right click my computer click manage Go to services double click on both RPC go to recovery change the 3 drop downs from restart to take no action Get the patch and install https://microsoft.com/downloads/deta...&displaylang=en delete key in reg edit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run "windows auto update"="msblast.exe" Restart system, then have the customer go to antivirus vendor and have them update, then do the rest of the security updates from Microsoft Yep.