Remote Procedure Call

[Tony]

Hi there,would be gratefull of some help.For the last 2
or 3 days while being connected to the net through
broadband im gettin a message saying remote procedure call
(rpc) and it shuts my computer down after between 2 and 5
minutes.
Please help

 

[Gary Thorn [MVP-Windows Technologies/Xbox]]

-----Original Message-----
Hi there,would be gratefull of some help.For the last 2
or 3 days while being connected to the net through
broadband im gettin a message saying remote procedure call
(rpc) and it shuts my computer down after between 2 and 5
minutes.
Please help

This a virus called w32.Blaster.Worm

Patch from Microsoft:
http://tinyurl.com/h84v
More info from MS:
www.microsoft.com/security/incident/blast.asp

-------------------------------

From Symantec Security Response for the virus
w32.Blaster.Worm:
http://tinyurl.com/jozm

-------------------------------

From Kelly - MVP:
Close Windows Explorer, End Process in the Task Manager
for msblast.exe, run
the edit on line 257 then run the patch listed below it:
http://www.kellys-korner-xp.com/xp_tweaks.htm

Windows XP Security Patch: Buffer Overrun In RPC Interface
Could Allow Code
Execution: http://tinyurl.com/ir5h

More information here:
www.kellys-korner-xp.com/xp_qr.htm#rpc

-------------------------------

Install a firewall (software like or hardware like router)
to help prevent future similar issues.

Most users will be using the 32 bit edition of WinXP Home
and Pro.


Hope this helps!

Gary Thorn
MVP-Windows Technologies/Xbox
Associate Expert

This posting is provided "AS IS" with no warranties, and
confers no rights

More about the Windows XP Expert Zone:


More about the MS MVP Program:
http://tinyurl.com/n08

 

[Tim Slattery]

Hi there,would be gratefull of some help.For the last 2
or 3 days while being connected to the net through
broadband im gettin a message saying remote procedure call
(rpc) and it shuts my computer down after between 2 and 5
minutes.

You have the Blaster worm!!

First, stop the bug from running by hitting CTRL-ALT-DELETE and
bringing up the task manager. Look for msblast.exe in the list, and
kill it. Now your computer won't shut down, but the bug is still there
and will run the next time you start your machine. Go to this URL to
find out how to get rid of it:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html