Remote Procedure Call(RPC)

[khayesaz]

I just received my new laptop...hp pavilion 4510...on
Thursday, the 4th of Dec. It went online on Friday.
Since going online, I am repeatedly getting this error:
RPC Service has terminated unexpectedly, and then I have
60 seconds to save and shut down everything I was working
on before the laptop shuts down and reboots. I can't
find any info on this and am having difficulty finding
online tech support like my desktop as.
I am a a loss as to why this is happening.
Anyone have any info on this?
You may email me at (e-mail address removed).
I will try to come back here to check, but I am concerned
after all the money I spent on this thing!

 

[PA Bear]

Posted & Mailed

Courtesy of Bruce Chambers:

If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

Protect Your PC
http://www.microsoft.com/security/protect/default.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html
--
HTH...Please post back to this thread

~Robear Dyer (aka PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

 

[Kelly]

Hi,

During that first sixty seconds:

Go to Start/Run and type in: services.msc. Scroll down to Remote Procedure
Call (RPC)/Recovery/First Failure/Restart the Service.

That will prevent the reboot. Then go to Start/Run/Msconfig/Startup and
uncheck msblast and end process via the Task Manager.

If this is your only machine, download the vbs script below, then follow
the prompt to install the patch.
http://www.kellys-korner-xp.com/regs_edits/msblast.vbs

This script removes all variants of the W32.Blaster.Worm (original, B, C, D,
E and F) and will inform you whether or not the patch is already installed.
http://www.kellys-korner-xp.com/xp_tweaks.htm. Direct download:
http://www.kellys-korner-xp.com/regs_edits/msblast.vbs

More information here:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

Beings you were still online during the patch install, run the vbscript
again when done. Good luck!



Registry Edits, Tips and Tricks for XP
http://www.kellys-korner-xp.com/xp_tweaks.htm