Is your computer shutting down shortly after you connect to the internet? This is probably caused by the RPC DCOM WORM known as MSBlaster. This is a problem in Microsoft Windows, this is NOT a problem with MCM Systems. We are providing the following information as a courtesy to our subscribers.

If you are using WINDOWS NT 4.0, WINDOWS 2000, or WINDOWS XP, you MUST install the patch located at http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-026.asp whether you currently have the worm or not. You are vulnerable and will eventually get it if you don't install the patch.

Additional information can be located at http://news.com.com/2100-1002-5062477.html?tag=nl


If you are having the issues of restarts in Windows XP, do the following:

  1. Go to Control Panel, then Administrative Tools, then Services.
  2. Under Services, find the Remote Procedure Call option.
  3. Right Click, select Properties
  4. Under Properties, go to Recovery tab
  5. You will see the "At first failure..." "At second failure..." "At third failure..."
  6. Change these to "Take No Action" or "Restart the Service" instead of the default "Reboot the Computer" option.
  7. You will be able to stay on to install the patch.
  8. Install the patch located at http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-026.asp

Removing RPC DCOM WORM (MSBlaster)

  1. Download the FixBlast.exe file.
  2. Save the file to a convenient location, such as your downloads folder or windows desktop.
  3. Close all running programs before running the tool.
  4. Windows XP users will have to disable the System Restore service. (instructions below)
  5. At this point you may have to boot into Safe mode (instructions below) before running the FixBlast program.
  6. Double click FixBlast.exe to start the removal tool
  7. Click Start to begin the process, and then allow the tool to run.
  8. After the tool ends, restart the computer.
  9. Run the tool again to be sure the system is clean.
  10. If the tool fails either time, you will have to run it from Safe mode.
  11. Windows XP users will need to restart the System Restore service.

Stopping and Starting the System Restore service

  1. Click Start -> Control Panel, or Start -> Settings -> Control Panel
  2. Here you should find an Administrative tools icon, double click it. If you do not see Administrative tools you will see the words "View all Control panel options" or "Switch to Classic View". You will then see an Administative Tools icon.
  3. Double click Services.
  4. Right click the "System Restore Service" option under the Name section, click properties.
  5. It will open a window displaying the general tab.
  6. You should find "Startup type:" listed in the middle of this window. Change this option from "Automatic" to "Disabled."

Starting your computer in safe mode

  1. When you first turn your computer on it goes through a Power On Self Test or POST. When your computer POSTs it will normally beep. Durring the POST your computer checks its components, processor, amount of memory, harddrives and the like. This screen may be hidden with your computer manufacturers logo. As soon as your computer completes its POST it will try and find a drive to boot into windows. You need to push F8 about every sec or so after the POST but before your computer loads windows. If your computer boots normally you didn't start pushing F8 soon enough. Reboot and try again.
  2. You should get a black screen with white writing. Use your arrow keys to select "Safe Mode."
  3. Hit Enter on your keyboard. Your computer should boot into safe mode (the bare minimum to load windows).