RPC causing systems to reboot

[Phil]

I have 3 out of 40 computers that keep rebooting. I have
run all the patches and have uptodate virus defs from
Symantec. My logs have two messages, "The RPC service
terminated unexpectedly, it has done this 1 time. " "The
process winlogon.exe has initiated the restart of
FRONTDESK1 for the following reason: No title for this
reason could be found. Minor Reason: 0xff Shutdown
Type: reboot Comment: Windows must now restart because
the Remote Procedure Call (RPC) service terminated
unexpectedly"
If anyone has any ideas let me know I tried turning on
the RPC Locator service but I have not seen any change
yet. The PCs seem to restart every other day.

 

[Walt]

You have the Blaster virus on your network.

 

[mags]

-----Original Message-----
I have 3 out of 40 computers that keep rebooting. I have
run all the patches and have uptodate virus defs from
Symantec. My logs have two messages, "The RPC service
terminated unexpectedly, it has done this 1 time. " "The
process winlogon.exe has initiated the restart of
FRONTDESK1 for the following reason: No title for this
reason could be found. Minor Reason: 0xff Shutdown
Type: reboot Comment: Windows must now restart because
the Remote Procedure Call (RPC) service terminated
unexpectedly"
If anyone has any ideas let me know I tried turning on
the RPC Locator service but I have not seen any change
yet. The PCs seem to restart every other day.

.having the same problem as you but only have 1 pc.

please let me know what to do. thanks

 

[Jupiter Jones [MVP]]

Phil;
You most likely have a worm W32.Blaster.Worm
Isolate each computer from the network IMMEDIATELY.
Install the patch listed below on EACH computer and clean each
computer BEFORE reconnection to the network.

Install or enable a firewall IMMEDIATELY:
http://support.microsoft.com/?kbid=283673

VERY IMPORTANT to follow ALL steps, closing ports or installing the
patch is NOT enough.
Download the patch and regedit referenced in the article below.
You may need to do this at an uninfected computer and burn to CD or
save on floppies.
Each file is small enough to fit on a floppy.

Follow this to clean and protect your computer:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

After this is resolved prevent similar occurrences by installing ALL
Critical Updates from Windows Update.
Keep antivirus up to date and run at least weekly.
Install or enable a firewall.

See also:
http://support.microsoft.com/?kbid=826955
http://www.microsoft.com/security/incident/blast.asp

 

[Janis]

I had this message on my home pc and found out that it
was the blaster worm and symantec has a fix for it. I ran
the fix and it blasted the blaster. Reran the fix, and I
was clean.