remote procedure call service malfunctioning

[prashant kumar]

when i log on the internet using a dial up connection
after some time (5 to 10 minutes) an error message
flashes saying that the remote procedure call(RPC)
service has unexpectedly terminated and says that teh
computer will shut down now. A timer starts and after 60
seconds the computer automatically shuts down. plz help
me.

 

[Ron Lowe]

when i log on the internet using a dial up connection
after some time (5 to 10 minutes) an error message
flashes saying that the remote procedure call(RPC)
service has unexpectedly terminated and says that teh
computer will shut down now. A timer starts and after 60
seconds the computer automatically shuts down. plz help
me.

Seems you have been infected with the Blaster worm:

http://www.microsoft.com/security/incident/blast.asp

 

[Dan]

Have encounter the same problem - do you have a
resolution?

 

[no1]

The worm interferes with the RPC service and causes the computer to
shut down. To stop it shutting down (assuming XP), go to start/control
panel/administrative tools/services/RPC (Remote Procedure Call). Right
click RPC (not RPC Locator) and click properties. Look under
'Recovery' tab in windows First Failure, Second Failure, etc. Change
them all to 'Take No Action'.

That prevents the computer shutting off and now you can get on the
internet. Go to the Symantec website and look up the MsBlaster Worm
fix. They have an exe file that will fix the problem.

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

Look for a hyperlink on this page called 'tool', under 'removal'.
Follow the link and d/l fixblast.exe.

***Be sure to get the Microsoft Hot Fix that addresses this
vulnerability in XP.

***Be aware the worm may be in a restore point as well. I don't know
if Symantecs fix cleans up the restore point.

Alternately, if you are experienced with the registry, look under the
key HKLM/software/microsoft/windows/current version/Run. The 'Run'
subkey holds your startup programs that start automatically. You
should see a reference to MsBlast.exe. Remove this sub key. If it's
not there, look under the key HKCU with same sub-keys as above.

There are other programs to remove in order to get the worm right out
of your system. That's why it's easier to use the Symantec remover.
You will find all kinds of instructions on the net regarding the
MSBlaster worm and how to remove it.