MSBlast.exe / Lovsan RPC Worm / Blaster Worm. a.k.a. W32/Lovsan.worm, W32.Blaster.Worm, Poza, Lovsun, Lovsan.c, Penis32.exe, TEEKIDS.EXE etc. Here's some help.

Windows XP Users will find their PC reboots when they're connected to the internet / network. "The worm doesn�t seem to infect your computer so much as control it. It forces your Remote Procedure Call service to overload and restart your computer. Those who have experienced this will know that it happens within about 30 seconds of connecting to the Internet i.e. browsing is impossible! - First you need to stop the computer restarting. To do this go to �control panel� - �Administrator Tools� - and �Services� - Find �Remote Procedure Call (RPC)� and double click - Select the tab �Recovery� and change the options from �Restart Computer� to �Take no action� - get the MS patch for Windows XP here. If you do not have time to get this, then get a friend to get it for you, and disconnect your PC from the internet!

Windows 2000 Apparently this won't cause your PC to reboot when you are being attacked, get the patch here.

Windows NT 4 Server, Terminal Server Edition, Windows XP 64bit, Windows 2003 Server get your patches here.

If you think your PC is infected get the removal tool here.

If you don't have anti-virus software then you can get AVG Anti Virus Software for FREE from grisoft.com. After installing this, you can set it to automatically keep itself up to date.

If you have a broadband internet connection then get a personal firewall, such as the FREE ZoneAlarm program, or the FREE Sygate Personal Firewall. If you have a home network, and a spare PC, then you might want to look at setting up a spare PC as a Firewall [only recommended to people who know what they're doing] using the FREE smoothwall or the FREE Clark Connect.

To keep your PC up to date in future you can either go to windowsupdate.com and scan for new updates, or with Windows 2000 and XP, you can enable "Automatic Updates", which will keep your computer up to date for you! Just go to [Windows 2000] Start, Settings, Control Panel, and double click "Automatic Updates", make sure the box is ticked when it starts "Keep my computer up to date..." and then choose one of the settings, if you trust microsoft, then you could select "Automatically download the updates, and install them on the schedule that I specify." [Windows XP] Find the Automatic Updates in the control panel, and make sure it's turned on.

If you are unable to access windowsupdate.microsoft.com you can also download the latest patches etc, from Microsoft's download center.

BBC News article about it. It affects Windows NT4.0, but Microsoft do not seem to have made a patch available for NT4.0! What are NT4.0 users going to do?

Symptoms of being attacked or infected Windows 2000 users may experience Copy and Paste no longer working, (this has happened where I work and the RPC service has stopped / crashed), and general unresponsiveness. Windows XP users will experience the machine rebooting itself when connected to the network or the internet. Microsoft has some helpful information about it as well. Please let me know if you experience any other symptoms / problems due to being affected / infected with the Worm.