work

nightmarish at work. i had patched all of my systems for the RPC bug last week, but one remote field system didnt get patched so it got msblasted. then since i tail logs, watch nload and trafshow anything remotely suspicious had me jumpy for msblast. trafshow kept showing 100% utilisation, outbound eth0 (public)... boss had 4 new viruses and spyware. every time his laptop leaves the office, it comes back with viruses. NAV is running, and current, my firewall is good and locked down. so i finally got him fixed.

After work went home. something smelled funny as i was walking up my porch. steph opened the door. full on dead something smell. she said it was pretty strong then but hadnt been too bad all day and she couldnt figure out where it was from. we figured out the stench was coming from the heater, the dead thing is in the attic. i was exhausted from work and we were supposed to go up to ms. sofie's house so we just went up early. we had a fine time socializing with her and scott and andrew, they showed us around the place again so we could house sit it this weekend/next week. that should be fun, they have put in a sauna since the last time i sat the house. new dog too.

RPC FUCKUPPERY, CLEANSING AND PURGING

for anyone who didnt get a jump on patching here are the patch and removal tools. also here are some instructions that i figured out today, and other tips from other folks who have had to deal with it. PLEASE GET YOUR SYSTEMS FIXED BEFORE SATURDAY THE 16TH

#1
then run
#2...
if you already have it your computer will be rebooting every 60 seconds. before it can reboot, set the clock back one year (or day or whatever) then run those 2 utils. you should be ok.

if it still cant remove c:\$WINDIR\system32\msblast.exe :

press "ctrl + alt + shift" and "end task" on msblast.exe
then
goto start>run>type in "cmd" hit enter.
then
type "attrib -h -s +a c:\yourwindirhere\system32\msblast.exe" hit enter.
then
type "del c:\yourwindirhere\system32\msblast.exe" hit enter
then
type "dir c:\yourwindowdirhere\system32\msblast.exe" hit enter.
what you are looking for is something like:
Directory of c:\windows\system32\
File Not Found

good luck.
here are three more links you may be interested in, depending on your frustration.

Knoppix, Debian based Live Linux CD

Debian, god's gift to admins

and finally

OSX, god's gift to those with money.

(btw, my birthday is next month, should anyone want to send me an old g4 that can run OSX)