Problem installing Sasser update!!!

The best way to install the patch relating to the sasser worm is by

going here http://v4.windowsupdate.microsoft.com/en/default.asp
1. Click scan for updates
2. Review and install
3. Install now

Here are instructions that may help solve the error message above when

trying to run the Windows RPC patches on XP computers.

Click Start menu, and then click the Run icon.
In the small box that Opens, type the three letters: cmd then click

the OK button. In the command prompt window that just opened (a black

background and white text), type the following commands (double check

your spelling on each line),

pressing the ENTER key on your keyboard  after each line:

net stop cryptsvc
ren %systemroot%\system32\catroot2 oldcatroot2
net start cryptsvc

Now type exit to close the command prompt window, and then try to

install the  patch again.

Additional Info

http://www.updatexp.com/cryptographic-service.html

Download it manually and run it:

http://admin.esc14.net/webs/rssmith/sasser_worm.htm

HTH,

Texruss

 

ok, thanks so much for your help guys...nothing worked, but it looks like the RPC isnt running...unfortunately i need the XP CD to boot the computer into Recovery Mode so i can get the RPC going...and i dont have the CD!!!  (damnit)  this is my sister-in-law's computer and she doesnt keep all her stuff together.  so i dont know how im going to get this fixed...but i just want to let you 2 know i really appreciated the help.

and if anybody else has any other ideas...let me know!!

thanks, val.

 

http://www.updatexp.com/cryptographic-service.html

(its the part about the RPC)

Burning the MS patch, the removal tool, and new AV definitions to a CDR on  a clean machine also works wonders. Take it to the sick machine, have it unplugged from Ethernet, then apply the patch, tool, and update definitions. It has worked for my school clients lately: 

http://www.russelltexas.com/antivirus/may12004worms.htm

Texruss

 

Hi Val

Chill   There not need for the xp cd or disabling RPC

Just get a firewall

Free zone alarm
http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp

Personally I had not installed the blaster worm patch for 1 whole year after everyone got hit because the firewall stopped the worm !

Additionally you could

1 Follow the 5 steps from microsoft
http://www.microsoft.com/security/incident/sasser.asp

2 More information and 4 other steps to help you keep your computer safe
http://snakefoot.fateback.com/tweak/winnt/service/lsa_exploit.html

cheers

To check and turn on Cryptographic services:

Start -> Run, type in services.msc and click OK.
Find Cryptographic Services in the list and double click on it.
Be sure Startup type is set to Automatic and click Apply.
Click on the Start button (if the service is not already started) and OK your way out.