RPC error

  • Thread starter Thread starter katie
  • Start date Start date
K

katie

Hi wondering if anyone can help me out. I am using XP and
when I connect to the internet I get connected then in
just a few minutes I get an errror that say " RPC remote
Procedure Call Service Teminated NT Authority System " and
then the computer shuts down. Thanks for you help.
 
Virus Alert About the W32.Blaster.Worm
http://support.microsoft.com/?kbid=826955

Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability
http://securityresponse.symantec.com/avcenter/security/Content/8205.htm

If you machine keeps rebooting: Start>Run> (type in) services.msc > scroll
down to Remove Procedure Call (RPC)>Recovery>First Failure>(choose) Restart
the Service.

You need to install...

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=823980

....but you must first remove the Worm. Here are several related pages which
can help:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc

http://forum.mvps.org/viewtopic.php?t=2703

http://www.bigblackglasses.com/Article.aspx?Article=342

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

Afterwards, turn on WinXP's built-in firewall...

http://support.microsoft.com/default.aspx?kbid=283673

....then update your virus definitions and run a full system scan.
--
HTH...Please post back to this thread

~Robear Dyer (aka PA Bear)
MS MVP-Windows (IE/OE)
http://mvp.support.microsoft.com
 
Greetings --

If your sister connected the PC to the Internet without having
first installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, she's very likely to have been infected by any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
Back
Top