REMOTE PROCEDURE CALL

[Donna]

My frien can connect to the internet but after about 2
minutes he gets the following error message:

Remote Procedure Call (RPC) was terminated unexpectedly
and the system will restart in 6o seconds...

The computer restarts and when we try to get online it
does the same thing. Can anyone help me? It was working
fine yesterday, but now it's not

Thank you in advance for your help...

Donna

 

[Larry Samuels MS-MVP XP \(Shell/User\)]

You are infected with the blaster worm.
Go here for a removal tool:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

There are 2 more variants out now.
The exes for the variants are teekids.exe and penis32.exe
Kelly's script kills all 3 variants.

If you are having trouble staying up to get the patch and removal tool:
When the shutdown prompt appears,go to start/run and type
shutdown -a to abort the shutdown process to allow you to stay up and
online.


--
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone -

 

[Nicholas]

Donna --

Apparently, your friend's computer has an unwelcome visitor (VIRUS) known
as the WM32 Blaster/Lovsan WORM.

It entered the computer through your internet connection because the "firewall"
was not properly enabled and essential critical updates were not installed from
the Windows Update website. For instructions on fixing the problem, visit:

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

Remove W32.MSBlast.Worm
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

Blaster Worm: Critical Security Patch for Windows XP (32-bit version)
http://microsoft.com/downloads/deta...6C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

Then immediately turn-on Windows XP's built-in Firewall:

How do I turn on the Firewall?
http://www.andyrathbone.com/tips/firewall.html


**** IMPORTANT ****

Visit this web site if you experience difficulty installing
Windows XP Security Patch 823980:

How To Fix The Cryptographic Service Error
http://www.updatexp.com/cryptographic-service.html



--
Nicholas

-------------------------------------------------------------------------


| My friend can connect to the internet but after about 2
| minutes he gets the following error message:
|
| Remote Procedure Call (RPC) was terminated unexpectedly
| and the system will restart in 6o seconds...
|
| The computer restarts and when we try to get online it
| does the same thing. Can anyone help me? It was working
| fine yesterday, but now it's not
|
| Thank you in advance for your help...
|
| Donna

 

[LVTravel]

Your friend has the MSBlast worm. Common problem for unprotected computers.
1st, turn on Internet Firewall in XP and then go to this site for
instructions http://www.kellys-korner-xp.com/xp_qr.htm#rpc

 

[D. L. Paluska]

I was told by my ISP, Earthlink, to do the following
after your friend's PC starts up again: go to Control
Panel, then to Network Connections and then Right Click
on Properties [down at the bottom]; then hit "Advanced"
at the top and then ENABLE the Firewall.

This should you allow you to re-enter the Internet, and
stay on and go to Microsoft to download the patch you
need to install to protect against the virus.

If you GET the virus, Norton advises that next disable
Restore BEFORE you install the virus protection or
eradicator you downloaded, or otherwise Restore may re-
infect or infect your computer anyway.

Query: how does a person Disable RESTORE? And later
Enable RESTORE?