Call(RPC)

[Miguel]

Ok, i just purchased my computer (compaq pressario) and it
was working fine. I got on the net to download the patch
for windows xp (i previously ran on an older computer and
it was running of windows98 and i have no clue to fix xp)
anyways so a dialog comes up and it says that somthing was
shut down un-expectedly and it said "Failed Call(RPC)"
then something else i cant remember. But so it says with a
counttdown that the computer will restart in 60sec. It
does but every time i log back into windows the dialoge
returns and i have no control...any takers on this problem?

 

[randwulf57]

Miguel:
W32.BLASTER.WORM
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html
What You Should Know About the Blaster Worm and Its Variants
http://www.microsoft.com/security/incident/blast.asp
Protect Your PC
http://www.microsoft.com/security/protect/

 

[Guest]

There are numerous possibilitys.
the following was a segment of a message on the internet
investigate at your own peril

QUOTE
Attention: Are you looking for info about the cause of "Remote Procedure Call (RPC)", initiated by NT Authority\System error message that shuts down Windows (you might also see svchost.exe error occasionally)?
It is a virus that started spreading very quickly on August 11, 2003. It works by exploiting unpatched Windows 2000/XP computers. It's been named Lovesan (LovSan, LuvSan) or Blaster.

Use McAfee VirusScan Online to scan your PC for viruses now and prevent such future problems.

Here is additional info about the virus from McAfee: ** MEDIUM VIRUS ALERT - 'LovSan' Worm**

Here is Microsoft's security patch for Windows XP that fixes this dangerous vulnerability allowing anyone to execute any program on your computer across the Internet. Here it is for Windows 2000. If you have a slower connection, you may not be able to download it before your computer shuts down. In this case, look at other options below or use another computer to download it and then copy it over and run it on your computer. Here is more info from Microsoft. You should also regularly use Windows Update.

There are several options to avoid the system shutdown:

Go to Start->Control Panel->Administrative Tools->Services->Remote Procedure Call (RPC)->Recovery Tab and choosing "Take No Action" for all three choices.

Go to Start->Run, type in shutdown/a, and press Enter.

Change the system time back by several hours.

Disconnect from the Internet.

Symantec has made available a virus removal tool (more info here).

Another removal option for more advanced users is:

1. Delete msblast.exe (usually found at c:\windows\system32\msblast.exe).
2. Delete the Windows Registry key: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\windows auto update" containing "msblast.exe". This is what causes the virus to start on reboot. To edit the Registry, go to Start->Run and put in "regedit".

Make sure to get some sort of anti-virus software, such as McAfee VirusScan to prevent future problems. Where can I get the latest Anti-Virus software?