Crash! RPC service terminated unexpecedly

G

George

New Dell laptop with XP on Earthlink dial-up. IE keeps
crashing. Says "Remote Procedure Call (RPC) service
terminated unexpecedly." It causes IE to shut-down;
sometimes as soon as I access IE and sometimes after
several minutes. Says the shutdown was initiated by NT
AUTHORITY\SYSTEM.
 
V

Vincenzo Di Russo [MVP]

George said:
New Dell laptop with XP on Earthlink dial-up. IE keeps
crashing. Says "Remote Procedure Call (RPC) service
terminated unexpecedly." It causes IE to shut-down;
sometimes as soon as I access IE and sometimes after
several minutes. Says the shutdown was initiated by NT
AUTHORITY\SYSTEM.

-----

Start -> Run -> cmd -> Ok.
Command prompt: shutdown -a

See:
http://www.microsoft.com/security/incident/blast.asp
"What You Should Know About the Blaster Worm and Its Variants".

Cheers,
 
J

Jim Byrd

Hi George - The mind boogles - it's hard to believe that you've hear nothing
about the MS Blaster worm that has infected an estimated 500,000 computers
world wide! But, evidently not, since that appears to be what you have.

First, so that you can stay booted up long enough to follow the rest of the
directions:

Go to Start/Run and type in: services.msc. Scroll down to Remote Procedure
Call (RPC)/Recovery/First Failure/Restart the Service (instead of Restart
the Computer which it probably is now).

Now, download this script and execute it (courtesy of Kelly site here:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc):
http://www.kellys-korner-xp.com/regs_edits/msblast.vbs After it's cleaned
up your machine of any of the five currently know variants of this worm, it
will ask you if you want to download the necessary patch to keep from being
re-infected. Say yes and then download and install this patch, 823980,
directly available also here: http://tinyurl.com/ir5h For safety's sake,
after you install the patch and re-boot, RE-RUN the msblast.vbs file to
clean up any infection that you just might have gotten between your first
clean up and installing the patch.

Note that the MSBlast worm is not the only thing that can attack your
machine in this particular fashion, and it's important that you install a
firewall which blocks certain specific ports. There's good information here
about this worm and a specific section about obtaining and installing a
firewall: http://www.microsoft.com/security/incident/blast.asp#steps

Follow these directions, and post back please with your results/problems.


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In
 
G

Guest

Vincenzo & Jim:

Thanks for the heads up. I'm correcting the problem as I
write (on another computer). I really appreciate the
info. Unfortunitely I never got a chance to setup all my
security stuff before I got zapped. I'm on step 3 of 4
right now. You guys are great.

George
 
J

Jim Byrd

YW, George.

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In
Vincenzo & Jim:

Thanks for the heads up. I'm correcting the problem as I
write (on another computer). I really appreciate the
info. Unfortunitely I never got a chance to setup all my
security stuff before I got zapped. I'm on step 3 of 4
right now. You guys are great.

George
..
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top