Remote Procedure Call

[Martin Hopkinson]

I've recently started getting the following message intermittently. It seems
to be always appear after i have started some interenet application and
connected to the internet:



"The system is shutting down. Please save all work in progress and log off.
Any unsaved changes will be lost. This shutdown was initiated by NT
AUTHORITY\SYSTEM



Time before shutdown: 00:00:58



Message:



Windows must now restart because the Remote Procedure Call (RPC) service
terminated unexpectedly."

I was wondering if there is something that i could do to stop this from
happening as it is getting to be very annoying (as you can probably
imagine!). Ive tried some simple things such as the system file checker and
restoring the computer to an earlier time. This doesn't seem to have solved
the problem. What else can i try? I would rather not have to do a repair
install which is the only other option i can think of. Any help would be
greatly appreciated. Thanks in advance...

Hoppo

 

[Mcploppy ©]

Martin Hopkinson bashed at the keyboard and said :

I've recently started getting the following message intermittently.
It seems to be always appear after i have started some interenet
application and connected to the internet:



"The system is shutting down. Please save all work in progress and
log off. Any unsaved changes will be lost. This shutdown was
initiated by NT AUTHORITY\SYSTEM



Time before shutdown: 00:00:58



Message:



Windows must now restart because the Remote Procedure Call (RPC)
service terminated unexpectedly."

I was wondering if there is something that i could do to stop this
from happening as it is getting to be very annoying (as you can
probably imagine!). Ive tried some simple things such as the system
file checker and restoring the computer to an earlier time. This
doesn't seem to have solved the problem. What else can i try? I would
rather not have to do a repair install which is the only other option
i can think of. Any help would be greatly appreciated. Thanks in
advance...

Hoppo

W32.Blaster.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability
http://www.sarc.com/avcenter/security/Content/8205.html

Install the Microsoft patch:
Buffer Overrun In RPC Interface Could Allow Code Execution (823980)
http://www.microsoft.com/technet/security/bulletin/MS03-026.asp

--
Mcploppy ©

{ Remove both MyShoes to email me}
{ Homepage: http://tinyurl.com/bbel }
{ Local Radio: http://tinyurl.com/j1vi }
{ Download Messenger 6 http://tinyurl.com/h7co }

 

[Haseeb Qadir]

Hi,

Sounds like your computer is rebooting because of the
Blaster virus. If your computer is rebooting repeatedly,
disconnect from the Internet before you enable your
firewall. To disconnect your computer from the Internet:

Broadband connection users: Locate the telephone cable
that runs from your external DSL or cable modem and
unplug that cable either from the modem or from the
telephone jack.
Dial-up connection users: Locate the telephone cable that
runs from the modem inside your computer to your
telephone jack and unplug that cable either from the
telephone jack or from your computer.

Then disable the internet connection firewall:

How to Enable Internet Connection Firewall (ICF) on
Windows XP
On the taskbar at the bottom of your screen, click Start,
and then click Control Panel.
Click the Network and Internet Connections category.
(If the Network and Internet Connectionsis not visible,
click Switch to Category View under Control Panel on the
left side of the Control Panel window.)
Click Network Connections.
Right-click the Dial-up, LAN, or High-Speed Internet
connection that you use to connect to the Internet, and
then click Properties from the context menu.
On the Advanced tab, under Internet Connection Firewall,
select Protect my computer or network, and then click OK.
The Windows XP firewall is now enabled.

Now it should be safe for you to re-connect your internet
connection (plug in the phone jack or cable wire). Your
system will not continue to reboot. But the steps are not
complete yet . Goto this URL and start following the
instructions from step 2:

http://www.microsoft.com/security/incident/blast.asp


Hope this helps
-Haseeb.