when I had the virus in question, I noticed it didn't cause a problem if my firewall (Zone Alarm, I'm afraid...) was set to disallow internet access. So if you figure out a way of getting the patch downloaded in its entirety before applying it, then disable internet access, enable the RPC host service, then apply the patch.....
Actually, thinking about it, I think you may need to re-route the inverse-polarised deuterium from the starboard warp plasma manifold through the dilithium injector matrix, and reverse the polarity of the bussard hydrogen particle collectors, before applying a 38 level fractal encryption algorithm to isolate the main processor..... it's risky, but it might just work....
Other than that, sorry... I have no suggestion....
D.