Remote Procedure Call (RPC) shuts down computer

[Guest]

Remote Procedure Call (RPC) shuts down computer when I connect to the internet.
This has only started following installation of a new primary hard drive and a brand new copy of XP home which includes the service pack.
There is no other software installed yet apart from my internet connections. This happened within a few minutes of connecting to windows update.

 

[Parish]

Remote Procedure Call (RPC) shuts down computer when I connect to the
internet. This has only started following installation of a new
primary hard drive and a brand new copy of XP home which includes the
service pack. There is no other software installed yet apart from my
internet connections. This happened within a few minutes of
connecting to windows update.

You've got infected by the Blaster/Nachi worm.

http://tinyurl.com/3h8kw

Although you might need to use another computer to access the 'net. If
you get a arning that the compugter will shutdown in X seconds then
typing 'shutdown -a' in the Run box will abort the shutdown.

 

[Guest]

Cheers mate

 

[Guest]

Your computer is now infected with the W32.Blaster.Worm or
one of its variants. This happened because you have not
been using an internet connection firewall and have
apparently neglected to install the critical updates
available at the Windows Update website.
-----------------------------------------------------------
-------
If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.
-----------------------------------------------------------
-------
Then immediately turn-on Windows XP's built-in Firewall:
http://www.microsoft.com/security/protect/
(To enable the built-in firewall, go to:
Control Panel, double-click Networking and Internet
Connections, then click Network Connections. Right-click
your connection, then
Click Properties, and on the Advanced tab, click the option
"Protect my computer and network..." Note: the built in
firewall only monitors incoming traffic not outgoing (ie
spyware, trojans, etc.. you may have on your system).)

What You Should Know About the Blaster Worm and Its
Variants
http://www.microsoft.com/security/incident/blast.asp

A tool is available to remove Blaster worm and Nachi worm
infections from computers
that are running Windows 2000 or Windows XP
http://support.microsoft.com/?kbid=833330

A security issue has been identified that could allow an
attacker to
remotely compromise a computer running Microsoft Windows
and
gain complete control over it. You can help protect your
computer
by installing this update from Microsoft.
http://www.microsoft.com/downloads/details.aspx?
FamilyId=2354406C-C5B6-44AC-9532-
3DE40F69C074&displaylang=en

Above courtesy of MVP Carey
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

***Install a good firewall. ZoneAlarm is a free one you
can install.
Install a good anti-virus program making sure you keep
it's definitions up to date! ***
- - - - - - - - - - - - -
Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

Protect Your PC
http://www.microsoft.com/security/protect/default.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm
..html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm
..removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32
..welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm
..removal.tool.html

-----Original Message-----
Remote Procedure Call (RPC) shuts down computer when I connect to the internet.
This has only started following installation of a new

primary hard drive and a brand new copy of XP home which
includes the service pack.

There is no other software installed yet apart from my

internet connections. This happened within a few minutes
of connecting to windows update.

 

[Guest]

If I format the primary drive, will this remove it?
Also, will it have infected the secondary/slave drive which contains all my data?

 

[Big Mac]

And you know - the really frustrating thing about the situation is
that Windows XP Home version does not install the firewall engaged.
This is a very bad overlook by Microsoft, in my opinion.

I too had the call and shutdowns on the Internet after re-installing
Windows XP. I didn't turn on the firewall again after the re-install.
(No service packs in the re-install version I had.) 2 seconds on the
Internet, and you've got the blaster worm, I understand. But I
thought this guy said he had the service packs already, which I
thought meant that even without the firewall he should have been
protected.

Anyway, I didn't have to go to my command line and type in anything.
All I did was turn on the XP firewall. No more system shutdowns.

But oddly, I went to the Symantec website and got their free blaster
removal program. I ran it, twice. It said nothing detected.
Someone mentioned somewhere that I could have had an "attempt" without
catching it.

What should be happening, but isn't:
Microsoft - please automatically turn on the XP firewall as default
when Windows is installling.
To all Firewall makers - when installing your firewall program, have
your software check to see if the XP firewall is turned on, and if
there would be a conflict, turn it off.

------- original thread: