remote procedure call

[mandy]

recently when logging on to the internet I have been
getting a message saying there is a system shut down
because of the remote procedure call was terminated
unexpectly. Then my computer restarts. how can i fix this?

 

[Will Denny]

Hi

Your system has been infected by the Blaster Worm. Have a look at the following links:

www.kellys-korner-xp.com/xp_qr.htm#rpc

Courtesy of MVP Kelly Theriot.

"Virus Alert About the Blaster Worm and Its Variants"
http://support.microsoft.com/?id=826955

"What You Should Know About the Blaster Worm and Its Variants"
http://www.microsoft.com/security/incident/blast.asp

--

Will Denny
MS-MVP Windows - Shell/User


| recently when logging on to the internet I have been
| getting a message saying there is a system shut down
| because of the remote procedure call was terminated
| unexpectly. Then my computer restarts. how can i fix this?

 

[roger]

Hi,

recently when logging on to the internet I have been
getting a message saying there is a system shut down
because of the remote procedure call was terminated
unexpectly. Then my computer restarts. how can i fix this?

You have a worm:

Blaster Worm FAQ:
http://www.microsoft.com/security/incident/blast_faq.asp

833330 A tool is available to remove Blaster worm and Nachi worm
infections
http://support.microsoft.com/?id=833330

Blaster Worm Security Bulletin:
http://www.microsoft.com/security/incident/blast.asp

826955 Virus Alert About the Blaster Worm and Its Variants
http://support.microsoft.com/?id=826955

826234 Virus Alert About the Nachi Worm
http://support.microsoft.com/?id=826234

MORE ON SECURITY:

Three steps you can take to improve your computer's security:
http://www.microsoft.com/security/protect/

321050 Description of a Personal Firewall
http://support.microsoft.com/?id=321050

Good luck

 

[Bruce Chambers]

Greetings --

If you connected the PC to the Internet without having first
enabled a firewall, without having first installed an antivirus
application with current virus definition files, and before installing
the KB824146 Hotfix, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH