Autoshutdown RPC Message

[sohail]

hi,

i've installed winxp on a sony desktop, and after logging
in and using it for some time, (and especially when i try
to apply sp1) i get a window telling me of an RPC
termination error message and that windows is shutting
down in 1 min, after which the time starts to countdown.

whats the problem?

thanks

 

[Bobby McMillan [MSFT]]

Hi,

Sounds like you have a virus called blaster.

Here is info on how to remedy this problem.
http://www.microsoft.com/security/incident/blast.asp

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Content-Class: urn:content-classes:message
| From: "sohail" <[email protected]>
| Sender: "sohail" <[email protected]>
| Subject: Autoshutdown RPC Message
| Date: Mon, 15 Dec 2003 02:59:12 -0800
|
| hi,
|
| i've installed winxp on a sony desktop, and after logging
| in and using it for some time, (and especially when i try
| to apply sp1) i get a window telling me of an RPC
| termination error message and that windows is shutting
| down in 1 min, after which the time starts to countdown.
|
| whats the problem?
|
| thanks
|

 

[Bruce Chambers]

Greetings --

If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH