Remote Procedure Call Service Terminated Unexpectedly

[Sarah]

My Home computer with Windows XP receives the below error
when connected to the internet. The time connected
varies. Can anyone tell me how to get around this error.
I can only fin KB Articles regarding Windows 2000. As far
as i know this machine has never had Windows 2000 on it.
The KB Article i found was number 327148

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Description:
The Remote Procedure Call (RPC) service terminated
unexpectedly

 

[Carey Frisch [MVP]]

Apparently, your computer has an unwelcome visitor (VIRUS) known
as the WM32 Blaster/Lovsan WORM. It only takes a split second for
this WORM to infect your computer if a firewall is not enabled and you
have an active internet connection.

It entered the computer through the internet connection because the "firewall"
was not properly enabled and essential critical updates were not installed from
the Windows Update website. For instructions on fixing the problem, visit:

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

Remove W32.MSBlast.Worm
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

Blaster Worm: Critical Security Patch for Windows XP (32-bit version)
http://microsoft.com/downloads/deta...6C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

Then immediately turn-on Windows XP's built-in Firewall:

Protect Your PC
http://www.microsoft.com/security/protect/default.asp



--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

-----------------------------------------------------------------------------------


| My Home computer with Windows XP receives the below error
| when connected to the internet. The time connected
| varies. Can anyone tell me how to get around this error.
| I can only fin KB Articles regarding Windows 2000. As far
| as i know this machine has never had Windows 2000 on it.
| The KB Article i found was number 327148
|
| Event Type: Error
| Event Source: Service Control Manager
| Event Category: None
| Event ID: 7031
| Description:
| The Remote Procedure Call (RPC) service terminated
| unexpectedly

 

[Bruce Chambers]

Greetings --

If you've connected the PC to the Internet without having first
enabling a firewall, without having first installed an antivirus
application with current virus definition files, and/or before
installing the KB824146 Hotfix, you're very likely to have been
infected from any of the thousands of PCs on the Internet that are
constantly broadcasting the Blaster and/or Welchia worms. It only
takes a few seconds of exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH