remote procedure call

G

Guest

I was running XP sp2 2055, but i was some problems with norton update, then i decided to uninstal it, and now i have can not connect to internet , and i have this remote procedure call that failed and reboot my pc

What can I do ?

thank you in advance
 
G

Guest

You can stop it this way. Most posters don't know it
won't let you read anything from the links they post. (
It shuts you down !! dah!! )


You have a virus = Mblaster Follow the steps below.

1. Go to control Panel> Network connections > *Your
connection* rt click >properties, Advanced Tab, check to
enable> The Firewall.

2. Do a Ctrl + Alt + DeL , on task manager highlight
MBlaster.exe and end the Process.

3. Go here and download the fix.

http://www.kellys-korner-xp.com/regs_edits/msblast.vbs


4. Get a XP update;
http://v4.windowsupdate.microsoft.com/en/default.asp









-----Original Message-----
I was running XP sp2 2055, but i was some problems with
norton update, then i decided to uninstal it, and now i
have can not connect to internet , and i have this remote
procedure call that failed and reboot my pc
 
J

John

-----Original Message-----
I was running XP sp2 2055, but i was some problems with
norton update, then i decided to uninstal it, and now i
have can not connect to internet , and i have this remote
procedure call that failed and reboot my pc
What can I do ?

thank you in advance
.
That was a really slick move, uninstalling norton way to
go!

If you connected the PC to the Internet without
having first
installed the KB824146 Hotfix, without having first
installed an
antivirus application with current virus definition
files, and before
enabling a firewall, you're very likely to get infected
from any of
the thousands of PCs on the Internet that are constantly
broadcasting
the Blaster and/or Welchia worms. It only takes a few
seconds of
exposure.

To stay on-line long enough to get the necessary
updates, patches,
and removal tools, click Start > Run, and
enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut
down. Also, make
sure you've enabled a firewall before starting, to
preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.wor
m.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.wor
m.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w3
2.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.wor
m.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger
 
D

David H. Lipman

Tony:

The first thing to do is to rewrite this problem so it can be understood.

If you are experiencing a RPC reboot, please explain the EXACT error message.

If I had to take a GUESS... the following is my response....

When or if you get the shutdown message...

Go to; Start --> Run
enter; shutdown -a

This will halt the shutdown and give you a chance to Download the McAfee worm removal tool,
Stinger: http://vil.nai.com/vil/stinger/ and install following patch for the RPC/RPCSS
Buffer Overflow Vulnerability that is addressed by Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

Please read: http://www.microsoft.com/security/incident/blast.asp

You also need a FireWall. If you don't patch the PC and not use a FireWall then you will
just be re-infected.

I also suggest the installation of *ALL* MS Critical Updates ASAP.

Dave





| I was running XP sp2 2055, but i was some problems with norton update, then i decided to
uninstal it, and now i have can not connect to internet , and i have this remote procedure
call that failed and reboot my pc
|
| What can I do ?
|
| thank you in advance
 
B

Bruce Chambers

Greetings --

If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH


tony said:
I was running XP sp2 2055, but i was some problems with norton
update, then i decided to uninstal it, and now i have can not connect
to internet , and i have this remote procedure call that failed and
reboot my pc
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top