Connection to Internet ends with Remote Procedure Call

[Ken]

How do I fix the following issue?
We get a Remote Procedure Call Services Terminated when
accessing the Internet. I have been told it is possibly a
worm or virus. We have tried multiple browswers with the
same results. Access to the Internet will shut down in
less than a minute.
I do have another computer available to download a fix to
transfer to CD and then transfer the fix over to the
computer that has the problem.

Thank you in advance for any help.
Ken

 

[Wesley]

Look in task manager for msblaster or something like it
and end it. then...
Step #1: (try offline)

1. In Control Panel, double-click Networking and Internet
Connections, and
then click Network Connections.
2. Right-click the connection on which you would like to
enable ICF, and
then click Properties.
3. On the Advanced tab, click the box to select the
option to Protect my
computer or network.

Step #2:

Visit
http://www.dougknox.com/xp/scripts_desc/xp_msblast.htm
and follow
the instructions.

[Courtesy of MS-MVPs Doug Knox, Kelly Theriot, and Mike
Koliz]

Step #3:

Download and install the following:

Blaster Worm: Critical Security Patch for Windows XP (32-
bit version)
http://microsoft.com/downloads/details.aspx?
FamilyId=2354406C-C5B6-44AC-9532-
3DE40F69C074&displaylang=en

 

[Tim Slattery]

How do I fix the following issue?
We get a Remote Procedure Call Services Terminated when
accessing the Internet. I have been told it is possibly a
worm or virus. We have tried multiple browswers with the
same results. Access to the Internet will shut down in
less than a minute.

You have the Blaster worm!!

First, stop the bug from running by hitting CTRL-ALT-DELETE and
bringing up the task manager. Look for msblast.exe in the list, and
kill it. Now your computer won't shut down, but the bug is still there
and will run the next time you start your machine. Go to this URL to
find out how to get rid of it:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

 

[Larry Samuels MS-MVP XP \(Shell/User\)]

When the shutdown prompt appears,go to start/run and type
shutdown -a to abort the shutdown process to allow you to stay up and
online.

http://www.kellys-korner-xp.com/xp_qr.htm#rpc

There are 2 more variants out now.
The exes for the variants are teekids.exe and penis32.exe
Kelly's script kills all 3 variants.

--
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone - www.microsoft.com/windowsxp/