Remote Procedure call (RPC) service

[Pete Q.]

I have been getting an error message for the past 2 days
when using my labtop.

I use Windows XP home edition.

I am using a wireless router and have used this for
awhile without any major issues.

I keep getting an error message that says "Windows must
restart because the Remote Procedure Call (RPC) service
was terminated unexpectedly" It then says this was
initiated by NT Authority System.

I am using in Outlook and Internet Explorer when I see
the message come up. This has happened several times in
the last couple of days.

Does anyone know what I can do to try and and fix. I
have tried to go through the Microsolft help section
without much success .....and of course they never
provide an 800 number where you can actually talk to a
live person!

Any help would be appreciated

 

[dev]

Pete Q. said:

I have been getting an error message for the past 2 days
when using my labtop.

I use Windows XP home edition.

I am using a wireless router and have used this for
awhile without any major issues.

I keep getting an error message that says "Windows must
restart because the Remote Procedure Call (RPC) service
was terminated unexpectedly" It then says this was
initiated by NT Authority System.

I am using in Outlook and Internet Explorer when I see
the message come up. This has happened several times in
the last couple of days.

Does anyone know what I can do to try and and fix. I
have tried to go through the Microsolft help section
without much success .....and of course they never
provide an 800 number where you can actually talk to a
live person!

Likely the "blaster" worm.

Search http://google.com for that term or search this group for "rpc" or
"remote" - and you will see dozens of posts with tips, fixes and links.

 

[Bruce Chambers]

Greetings --

If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Julie]

Welcome to the Blaster Worm Club. Go to Microsoft.com to
Support to Security to Downloads. Download the Blaster
Worm Patch. It works for a while, but you need to search
for some anti-virus software. Microsoft has lots of info
on this. Good luck.