Remote Procedure Call Servic

C

Chetan

I get a message saying that the remote procedure call
service terminated unexpectedly. Which service pack do i
download.
 
P

Patrick Keenan

Chetan said:
I get a message saying that the remote procedure call
service terminated unexpectedly. Which service pack do i
download.

None, actually. You probably have the MSBLAST worm. There are removal
tools for it in various places, including Symantec and Microsoft.

It's probably easiest to turn off by restarting in Safe Mode (press F8 at
startup), then Start, run, regedit.

Under
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Look for a line in the right-hand pane that has 'msblast.exe' in it.
Delete that line.

Exit regedit and restart the machine. Download the removal tool and run
it.

HTH
-pk
 
L

Larry Samuels MS-MVP XP \(Shell/User\)

Go to http://www.kellys-korner-xp.com/xp_qr.htm#rpc and download the removal
tool.

There are more variants out now.
The exes for 2 of the variants are teekids.exe and penis32.exe
Kelly's script kills all 3 variants.
As more variants are found Kelly and Doug are adding removal instructions to
the script to kill them as well.

If you are having trouble staying up to get the patch and removal tool:
When the shutdown prompt appears,go to start/run and type
shutdown -a to abort the shutdown process to allow you to stay up and
online.


--
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone -
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top