Remote Procedure Call

[lj]

Hello,
We have an End User that is continuing to receive the RPC
termination message when dialing up to the Internet on her
laptop. We have downloaded and installed all of the
Windows updates (Windows XP Pro). We have updated and
scanned for viruses (McAfee). No viruses have been
detected. We have also searched for the MSBlaster virus in
the Task Manager and cannot find it. I have included a few
logs from the Event Viewer (please see below). Is this
problem due to a virus or something else? What can we do
to eliminate this problem??
Thanks for your assistance!
LJ
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 9/5/2003
Time: 3:01:04 PM
User: N/A
Computer: SPOTTS
Description:
The Remote Procedure Call (RPC) service terminated
unexpectedly. It has done this 1 time(s). The following
corrective action will be taken in 60000 milliseconds:
Reboot the machine.

Event Type: Information
Event Source: USER32
Event Category: None
Event ID: 1074
Date: 9/5/2003
Time: 3:01:04 PM
User: NT AUTHORITY\SYSTEM
Computer: SPOTTS
Description:
The process winlogon.exe has initiated the restart of
SPOTTS for the following reason: No title for this reason
could be found
Minor Reason: 0xff
Shutdown Type: reboot
Comment: Windows must now restart because the Remote
Procedure Call (RPC) service terminated unexpectedly

 

[Lem]

Sure sounds like Blaster. Perhaps McAfee only partially disabled it.
Try the Symantec removal tool:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

 

[jmfish]

You might want to try the fixblast.exe app from Symantec
in case there is a registry entry that McAfee might have
missed.