Computer and Software Support


Mblaster virus

Follow the following steps to fix the issue. The underline green text is hyperlinks that will give you a picture of the item your looking at or to another webpage that gives step by step procedures for that action.

  1. Boot to Safe Mode

  2. Click Start

  3. Click Run and type services.msc

  4. Click on OK.

  5. On the right-hand pane, Double-click on Remote Procedure Call  (Part of the text may be hidden due to the column not big enough to show the entire text of Remote Procedure Call. Hold your mouse over the text and you will be able to see the entire text.)

  6. In the Remote Procedure Call (RPC) Properties (Local Computer) window, Click the Recovery tab

  7. Change all drop-down menus to Take No Action.

  8. Click on OK.

  9. On the right-hand pane, Double-click on Remote Procedure Call Locator (Part of the text may be hidden due to the column not big enough to show the entire text of Remote Procedure Call Locator. Hold your mouse over the text and you will be able to see the entire text.)

  10. In the Remote Procedure Call (RPC) Locator Properties (Local Computer) window, Click the Recovery tab

  11. Change all drop-down menus to Take No Action.

  12. Click on OK.

  13. Press CTRL+ALT+DEL and end all instances of MSBLAST.

  14. Click on Start

  15. Click on Run and type in REGEDIT

  16. Click on OK

  17. Double-click on HKEY_LOCAL_MACHINE

  18. Double-click on SOFTWARE

  19. Double-click on Microsoft

  20. Double-click on Windows

  21. Double-click on CurrentVersion

  22. Double-click on Run

  23. In the right pane, delete "windows auto update"="msblast.exe"

  24. Do a search for *msb*.*

  25. Delete any instances of MSBLAST.EXE

  26. Purge the system restore Data Store

  27. Enable Internet Connection Firewall

  28. Download and install the RPC Patch at

http://download.microsoft.com/download/9/8/b/98bcfad8-afbc-458f-aaee-b7a52a983f01/WindowsXP-KB823980-x86-ENU.exe

 or

 go to http://www.windowsupdate.com and install all updates or at least the RPC patch. 

Note:If you get  the RPC error message again when you go online:

Click the Start button, click Run, in the Open box type shutdown -a and click OK.

  1. If you get the following message "Setup could not verify the integrity of the file. Make sure the Cryptographic service is running on this computer" click here for instructions on the Cryptographic service.

If this doesn't work the do the following

  1. Click on Start

  2. Click on Run and type CMD

  3. Click on OK

  4. At the command prompt, type the following lines and press ENTER  after each line.

 

regsvr32 softpub.dll

regsvr32 wintrust.dll

regsvr32 initpki.dll

regsvr32 dssenh.dll

regsvr32 rsaenh.dll

regsvr32 gpkcsp.dll

regsvr32 sccbase.dll

regsvr32 slbcsp.dll

regsvr32 cryptdlg.dll

 

  1. click OK  when you receive the message that DllRegisterServer in FileName succeeded.

  2. Type exit to quit Command Prompt.

  3. Restart and then run the patch.

  4. If you get a TFTP error, follow the following steps

  5. Boot to safe mode and run MSCONFIG

  6. UNCHECK THE FOLLOWING

 

SVCHOST

TFTP2228

TFTP1440

TFTP3756

DO NOT REBOOT

 

  1. Run Regedit and delete the following registry keys:

tftp2228

tftp1440

tftp3756

 

  1. Click on File

  2. Click on  exit.

  3. Click on Start

  4. Click on All Programs

  5. Click on Startup

  6. Remove the following

 

SVCHOST

TFTP2228

TFTP1440

TFTP3756

 

REBOOT - ERROR SHOULD BE GONE.  UPDATE NORTON. Make a manual restore point.