Remote Procedure Call

[Kurt Dawson]

Every so often when I'm in windows (xp) a message will
pop up saying "This system is shutting down. This
shutdown was intiated by NT AUTHORITY\SYSTEM" it says
windows must now restart because the Remote Procedure
Call (RPC) service terminated unexpectedly. I even re-
formatted to try and get rid of it. This has never
happened before. Is there anything i can do?

 

[al]

-----Original Message-----
Every so often when I'm in windows (xp) a message will
pop up saying "This system is shutting down. This
shutdown was intiated by NT AUTHORITY\SYSTEM" it says
windows must now restart because the Remote Procedure
Call (RPC) service terminated unexpectedly. I even re-
formatted to try and get rid of it. This has never
happened before. Is there anything i can do?
.
www.microsoft.com/security/incident/blast.asp

where have you been the last two weeks?

mars? pluto?

certainly you havent looked at tv or a newspaper or the
internet or talked with any living person?

 

[Amanda]

-----Original Message-----
Every so often when I'm in windows (xp) a message will
pop up saying "This system is shutting down. This
shutdown was intiated by NT AUTHORITY\SYSTEM" it says
windows must now restart because the Remote Procedure
Call (RPC) service terminated unexpectedly. I even re-
formatted to try and get rid of it. This has never
happened before. Is there anything i can do?
.

Hi Kurt,
I had the same problem...mine kept popping up when i was
on the net...i think its a virus...cause now my computer
is like totally screwed up, what about urs anything
unusall about ur comp at the moment

 

[Larry Samuels MS-MVP XP \(Shell/User\)]

Go to http://www.kellys-korner-xp.com/xp_qr.htm#rpc and download the removal
tool.
Run the tool to remove the worm,then follow the onscreen prompts to download
the patch.
Make sure you download the 32bit patch if you are running XP.

There are more variants out now.
The exes for 2 of the variants are teekids.exe and penis32.exe
Kelly's script kills all 3 variants.
As more variants are found Kelly and Doug are adding removal instructions to
the script to kill them as well.

If you are having trouble staying up to get the patch and removal tool:
When the shutdown prompt appears,go to start/run and type
shutdown -a to abort the shutdown process to allow you to stay up and
online.


--
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone -

 

[Larry Samuels MS-MVP XP \(Shell/User\)]

Go to http://www.kellys-korner-xp.com/xp_qr.htm#rpc and download the removal
tool.
Run the tool to remove the worm,then follow the onscreen prompts to download
the patch.
Make sure you download the 32bit patch if you are running XP.

There are more variants out now.
The exes for 2 of the variants are teekids.exe and penis32.exe
Kelly's script kills all 3 variants.
As more variants are found Kelly and Doug are adding removal instructions to
the script to kill them as well.

If you are having trouble staying up to get the patch and removal tool:
When the shutdown prompt appears,go to start/run and type
shutdown -a to abort the shutdown process to allow you to stay up and
online.


--
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone -