RPC Enabling

[Guest]

Hi,

My computer seems to get infected with the Blaster worm. When I first connected to the internet, running NAV live update, my computer rebooted with the message similar to:
"The Remote Procedure Call (RPC) service terminated

unexpectedly. It has done this 1 time(s). The following
corrective action will be taken in 60000 milliseconds:
Reboot the machine."

After that I was able to download and run the latest virus definition. When I ran it, my computer started to behave in a weird way. NAV window disappeared from the screen after several seconds, so did some other applications. I noticed that the processor got a 100% load and it was caused by svchost -k. At that time I had no idea that my laptop got infected and so I disabled the RPC for the hardware profile, assuming that I'd be able to enable it back later. It solved the problem with processor overload, but after the reboot several functions/applications stopped to function (like dial-up internet connection, also start bar at the bottom disappeared, search function for files in windows browser stopped working, etc). And the bad thing was that since then I wasn't able to open the properties for the services. Is there any way to enable RPC in the hardware profile through the registry ?

And finally, I ran the FixBlast.exe, but strangely enough it didn't detect any blaster virus.
What could I do to bring my laptop back to live?
Thank you

 

[Michael Solomon \(MS-MVP Windows Shell/User\)]

Assuming you have an actual XP CD as opposed to a recovery CD, try a Repair
install as follows:
NOTE, while a repair install should leave your data files intact, if
something goes wrong during the repair install, you may be forced to start
over and do a clean install of XP. If you don't have your data backed up,
you would lose your data should that eventuality occur.

Boot from the CD. If your system is set to be able to boot from the CD, it
should detect the disk and give a brief message, during the boot up, if you
wish to boot from the CD press any key.

Once you have pressed a key, setup should begin. You will see a reference
asking if you need to load special drivers and another notice that if you
wish to begin the ASR (Automatic Recovery Console) depress F2. Just let
setup run past all of that. It will continue to load files and drivers.

Then it will bring you to a screen. Eventually, you will come to a screen
with the option to (1) setup Windows or (2) Repair Windows Installation
using the Recovery console.

The first option, to setup Windows is the one you want and requires you to
press enter. When asked, press F8 to accept the end user agreement. Setup
will then search for previous versions of Windows. Upon finding your
version, it will ask if you wish to Repair your current installation or
install fresh. Press R, that will run a repair installation. From there
on, follow the screens.

If you only have a recovery CD, your options are quite limited. You can
either purchase a retail version of XP will allow you to perform the above
among other tools and options it has or you can run your system recovery
routine with the Recovery CD which will likely wipe your drive, deleting all
files but will restore your setup to factory fresh condition.


--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/

Hi,

My computer seems to get infected with the Blaster worm. When I first

connected to the internet, running NAV live update, my computer rebooted
with the message similar to:

"The Remote Procedure Call (RPC) service terminated
After that I was able to download and run the latest virus definition.

When I ran it, my computer started to behave in a weird way. NAV window
disappeared from the screen after several seconds, so did some other
applications. I noticed that the processor got a 100% load and it was caused
by svchost -k. At that time I had no idea that my laptop got infected and so
I disabled the RPC for the hardware profile, assuming that I'd be able to
enable it back later. It solved the problem with processor overload, but
after the reboot several functions/applications stopped to function (like
dial-up internet connection, also start bar at the bottom disappeared,
search function for files in windows browser stopped working, etc). And the
bad thing was that since then I wasn't able to open the properties for the
services. Is there any way to enable RPC in the hardware profile through the
registry ?

 

[Guest]

-----Original Message-----
Hi,

My computer seems to get infected with the Blaster worm.

When I first connected to the internet, running NAV live
update, my computer rebooted with the message similar to:

"The Remote Procedure Call (RPC) service terminated
After that I was able to download and run the latest

virus definition. When I ran it, my computer started to
behave in a weird way. NAV window disappeared from the
screen after several seconds, so did some other
applications. I noticed that the processor got a 100%
load and it was caused by svchost -k. At that time I had
no idea that my laptop got infected and so I disabled the
RPC for the hardware profile, assuming that I'd be able
to enable it back later. It solved the problem with
processor overload, but after the reboot several
functions/applications stopped to function (like dial-up
internet connection, also start bar at the bottom
disappeared, search function for files in windows browser
stopped working, etc). And the bad thing was that since
then I wasn't able to open the properties for the
services. Is there any way to enable RPC in the hardware
profile through the registry ?

And finally, I ran the FixBlast.exe, but strangely

enough it didn't detect any blaster virus.

 

[Willit]

If you have done the MBlaster removal and are still
having problems do the following.

Control Panel> Admin. Tools> Componet Services> RPC>
Rt Click> Properties> Recovery Tab, Change First "To
Restart Service or take no action"

-----Original Message-----
Hi,

My computer seems to get infected with the Blaster worm.

When I first connected to the internet, running NAV live
update, my computer rebooted with the message similar to:

"The Remote Procedure Call (RPC) service terminated
After that I was able to download and run the latest

virus definition. When I ran it, my computer started to
behave in a weird way. NAV window disappeared from the
screen after several seconds, so did some other
applications. I noticed that the processor got a 100%
load and it was caused by svchost -k. At that time I had
no idea that my laptop got infected and so I disabled the
RPC for the hardware profile, assuming that I'd be able
to enable it back later. It solved the problem with
processor overload, but after the reboot several
functions/applications stopped to function (like dial-up
internet connection, also start bar at the bottom
disappeared, search function for files in windows browser
stopped working, etc). And the bad thing was that since
then I wasn't able to open the properties for the
services. Is there any way to enable RPC in the hardware
profile through the registry ?

And finally, I ran the FixBlast.exe, but strangely

enough it didn't detect any blaster virus.