rpc help plz

[haiden]

my pc keeps doin system shut dpwn rpc remote procedure
call wat do i do plz help to get me faster im
(e-mail address removed) i use msn messanger a lot

 

[Jim Eshelman]

my pc keeps doin system shut dpwn rpc remote procedure
call wat do i do plz help to get me faster im
(e-mail address removed) i use msn messanger a lot

You likely are infected with the Blaster worm. First, to stop the reboots,
change the following defaults. Click Start | Run, and type SERVICES.MSC. At
right, right-click on Remote Procedure Call (RPC) (but not on the similar
Remote Procedure Call Locator) and select "Properties." On the Recovery tab,
set the First Failure, Second Failure, and Subsequent Failure boxes to
"Restart the Service." Click "Apply" after each of them, and "OK" when
finished.

Then, to finish the removal, plus take steps to protect your computer
against getting infected again, follow out the steps here:
http://winsupportcenter.com/win5/a/blaster.htm

--
Jim Eshelman, MS-MVP Windows
http://aumha.org/
http://forum.aumha.org/

Did you find this newsgroup on the web? A newsreader like Outlook Express
will make your online life a lot easier. Get better help!
See: http://aumha.org/win4/supp1b.htm and
http://support.microsoft.com/support/news/howto/default.asp

 

[Rick \Nutcase\ Rogers]

Hi,

It's a virus called blaster or lovesan. Information:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-039: A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious
Programs
http://support.microsoft.com/?kbid=824146

Problem is, you needed to install the patch BEFORE you got infected to avoid
it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone