The Remote Procedure Call (RPC) terminated unexpectedly

[Jeff G]

I am getting a System Shutdown error message very
frequently on my computer. I have been unable to fix this
poblem, and I don't know how to fix this problem. This
error message reads are follows: "The system is shutting
down. Please save any work in programs and log off. Any
unsaved changes will be lost. This shutdown was initiated
by NT AUTHORITY/SYSTEM." After this message it gives me
60 seconds until the computer will be restarted. Then
below this, it says: "Windows must now restart because
the Remote Procedure Call (RPC) service terminated
unexpectedly." Please help me out on how I can fix this
problem.

 

[Nicholas]

Jeff --

Step #1:

The first thing you should do is enable Windows XP's built-in Firewall:

1. In Control Panel, double-click Networking and Internet Connections, and
then click Network Connections.
2. Right-click the connection on which you would like to enable ICF, and
then click Properties.
3. On the Advanced tab, click the box to select the option to Protect my
computer or network.

Step #2:

Visit http://www.dougknox.com/xp/scripts_desc/xp_msblast.htm and follow
the instructions.

[Courtesy of MS-MVPs Doug Knox, Kelly Theriot, and Mike Koliz]

Step #3:

Download and install the following:

Blaster Worm: Critical Security Patch for Windows XP (32-bit version)
http://microsoft.com/downloads/deta...6C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

--
Nicholas

--------------------------------------------------------------------------


| I am getting a System Shutdown error message very
| frequently on my computer. I have been unable to fix this
| poblem, and I don't know how to fix this problem. This
| error message reads are follows: "The system is shutting
| down. Please save any work in programs and log off. Any
| unsaved changes will be lost. This shutdown was initiated
| by NT AUTHORITY/SYSTEM." After this message it gives me
| 60 seconds until the computer will be restarted. Then
| below this, it says: "Windows must now restart because
| the Remote Procedure Call (RPC) service terminated
| unexpectedly." Please help me out on how I can fix this
| problem.

 

[Antnee]

See http://www.visualante.org/msblast for more
information on the issue, including how to fix any
infected systems

The site is being updated as and when necesary to keep
you all up to date with developments

 

[Jupiter Jones [MVP]]

Jeff;
You most likely have a worm W32.Blaster.Worm
DISCONNECT the subject computer from any network IMMEDIATELY.

Install or enable a firewall IMMEDIATELY:
http://support.microsoft.com/?kbid=283673

VERY IMPORTANT to follow ALL steps, closing ports or installing the
patch is NOT enough.
Download the appropriate patch referenced in Ron Martells article
below.
You may need to do this at an uninfected computer and burn to CD or
save on floppy.

This is the IMPORTANT fix by Ron Martell:
http://www.bigblackglasses.com/Article.aspx?Article=342

Also see:
http://isc.sans.org/diary.html?date=2003-08-11

After this is resolved prevent similar occurrences by installing ALL
Critical Updates from Windows Update.
Keep antivirus up to date and run at least weekly.
Install or enable a firewall.