IE6 - RPC SERVICE

[HAZEL]

I have a laptop with IE6 which has recently started to
close my computer down whilst I am browsing the net. It
does not do it after a set time or a specific action, as
far as I can tell the closing down is entirely random.
Before it closes down i get a message saying "The system
is shutting down. Windows must restart because the RPC
(Remote Procedure Call) service terminated unexpectedly."
I am not computer literate as regards restoring systems.
Can anybody suggest what might be wrong and how I fix it
please?

 

[Jim Byrd]

Hi Hazel - The mind boogles - it's hard to believe that you've hear nothing
about the MS Blaster worm that has infected an estimated 500,000 computers
world wide! But, evidently not, since that appears to be what you have.

First, so that you can stay booted up long enough to follow the rest of the
directions:

Go to Start/Run and type in: services.msc. Scroll down to Remote Procedure
Call (RPC)/Recovery/First Failure/Restart the Service (instead of Restart
the Computer which it probably is now).

Now, download this script and execute it (courtesy of Kelly site here:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc):
http://www.kellys-korner-xp.com/regs_edits/msblast.vbs After it's cleaned
up your machine of any of the five or so currently know variants of this
worm, it will ask you if you want to download the necessary patch to keep
from being re-infected. Say yes and then download and install this patch,
823980, directly available also here: http://tinyurl.com/ir5h For safety's
sake, after you install the patch and re-boot, RE-RUN the msblast.vbs file
to clean up any infection that you just might have gotten between your first
clean up and installing the patch.

Note that the MSBlast worm is not the only thing that can attack your
machine in this particular fashion, and it's important that you install a
firewall which blocks certain specific ports. There's good information here
about this worm and a specific section about obtaining and installing a
firewall: http://www.microsoft.com/security/incident/blast.asp#steps

Follow these directions, and post back please with your results/problems.


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In