RPC ERRORS

[Guest]

As soon as I log on through XP, I get a window that says
my system is being shut down because my RPC Service has
terminated. My computer reboots and the same window and
message apeears over and over again. Does anyone know
what could be wrong? I have an AOL connection and I also
have a CABLE connection...HELP ME PLEASE

 

[Matt]

Right I have posted all the info on my website, and the link to Symantec. It
seems like a worm is responsible for this RPC vulnerability, and RPC fix,
and removal instructions are on my website.

http://www.tandmdigital.com

There you will find the type of RPC error that has been going around very
rapidly at the moment, and the link to Symantec which has fixes.

Hope this helps;
Matt
http://tandmdigital.com

 

[Jonathan Maltz [MS-MVP]]

Install:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp
As soon as you can!

Also enable Windows XP's built in firewall:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;283673

Then go to WindowsUpdate to pick up the latest updates:
http://windowsupdate.microsoft.com

More info about the worm:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

--
--Jonathan Maltz [Microsoft MVP - Windows Server]
http://www.imbored.biz - A Windows Server 2003 visual, step-by-step
tutorial site
Only reply by newsgroup. If I see an email I didn't ask for, it will be
deleted without reading.

 

[Jonathan Maltz [MS-MVP]]

Matt,

Why don't you give users direct links instead of trying to accumulate site
hits on your own site?

Just curios, if you don't mind my asking

--
--Jonathan Maltz [Microsoft MVP - Windows Server]
http://www.imbored.biz - A Windows Server 2003 visual, step-by-step
tutorial site
Only reply by newsgroup. If I see an email I didn't ask for, it will be
deleted without reading.

 

[Kelly]

To stop the reboots: Go to Start/Run and type in: services.msc. Scroll down
to Remote Procedure Call (RPC)/Logon/First Failure/Restart the Service.

Then close Windows Explorer, End Process in the Task Manager for
msblast.exe, run the edit on line 257 then run the patch listed below it:
http://www.kellys-korner-xp.com/xp_tweaks.htm

Windows XP Security Patch: Buffer Overrun In RPC Interface Could Allow Code
Execution: http://tinyurl.com/ir5h

More information here:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc


/xp_tweaks.htm

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm