computer restart nt authority system shut down

O

octavio banda

My computer suddenly restart and send a error message
that says that the system must shut down because the
Remote Procedure Call (RPC) service terminated
unexpectedly.

What can I do?
 
G

Gary Thorn [MVP-Windows Technologies/Xbox]

-----Original Message-----
My computer suddenly restart and send a error message
that says that the system must shut down because the
Remote Procedure Call (RPC) service terminated
unexpectedly.

What can I do?
This a virus called w32.Blaster.Worm

Patch from Microsoft:
http://tinyurl.com/h84v
More info from MS:
www.microsoft.com/security/incident/blast.asp

-------------------------------

From Symantec Security Response for the virus
w32.Blaster.Worm:
http://tinyurl.com/jozm

-------------------------------

From Kelly - MVP:
Close Windows Explorer, End Process in the Task Manager
for msblast.exe, run
the edit on line 257 then run the patch listed below it:
http://www.kellys-korner-xp.com/xp_tweaks.htm

Windows XP Security Patch: Buffer Overrun In RPC Interface
Could Allow Code
Execution: http://tinyurl.com/ir5h

More information here:
www.kellys-korner-xp.com/xp_qr.htm#rpc

-------------------------------

Install a firewall (software like or hardware like router)
to help prevent future similar issues.

Most users will be using the 32 bit edition of WinXP Home
and Pro.


Hope this helps!

Gary Thorn
MVP-Windows Technologies/Xbox
Associate Expert

This posting is provided "AS IS" with no warranties, and
confers no rights

More about the Windows XP Expert Zone:


More about the MS MVP Program:
http://tinyurl.com/n08
 
T

Tim Slattery

octavio banda said:
My computer suddenly restart and send a error message
that says that the system must shut down because the
Remote Procedure Call (RPC) service terminated
unexpectedly.

You have the Blaster worm!!

First, stop the bug from running by hitting CTRL-ALT-DELETE and
bringing up the task manager. Look for msblast.exe in the list, and
kill it. Now your computer won't shut down, but the bug is still there
and will run the next time you start your machine. Go to this URL to
find out how to get rid of it:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top