RPC (Remote Procedure Call)

[Terry]

I have installed Windows XP Home Edition.

I can only connect to the internet for a few minutes before
I get an error message; "Windows must restart because the
RPC Service terminated unexpectedly"

The Advanced System Information-Error Log logs; the Source
as "EventSyste m" and a Discription of "The Com+ Event
System detected a bad return code during its internal
processing. HRESULT was 800706BA from line 44 of
d:\nt\com\com1x\src\events\tie r1\eventsystemobj.ccp.
Please contact Microsoft Product Support Services to
report this error."

Any help would be appreciated, Thank You

 

[Rick \Nutcase\ Rogers]

Hi Terry,

When the shutdown warning appears, click start/run and enter "shutdown -a"
to halt the process. It's a virus called blaster or lovesan. Information:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://www.pchell.com/virus/msblast.shtml
http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-039: A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious
Programs
http://support.microsoft.com/?kbid=824146

Problem is, you needed to install the patch BEFORE you got infected to avoid
it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Carey Frisch [MVP]]

There are thousands of nasty computer viruses/worms looking for unprotected
computers. Your computer can be infected within a few milliseconds the moment
an internet connection is established if your computer is not properly secured.

Apparently, your computer is now infected with the W32.Blaster.Worm or one of its variants.
This happened because you have not been using an internet connection firewall and have
apparently neglected to install the critical updates available at the Windows Update website.

------------------------------------------------------------------

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

------------------------------------------------------------------

Then immediately turn-on Windows XP's built-in Firewall:
http://www.microsoft.com/security/protect/

What You Should Know About the Blaster Worm and Its Variants
http://www.microsoft.com/security/incident/blast.asp

A tool is available to remove Blaster worm and Nachi worm infections from computers
that are running Windows 2000 or Windows XP
http://support.microsoft.com/?kbid=833330

A security issue has been identified that could allow an attacker to
remotely compromise a computer running Microsoft Windows and
gain complete control over it. You can help protect your computer
by installing this update from Microsoft.
http://www.microsoft.com/downloads/...6C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-----------------------------------------------------------------------------------


| I have installed Windows XP Home Edition.
|
| I can only connect to the internet for a few minutes before
| I get an error message; "Windows must restart because the
| RPC Service terminated unexpectedly"
|
| The Advanced System Information-Error Log logs; the Source
| as "EventSyste m" and a Discription of "The Com+ Event
| System detected a bad return code during its internal
| processing. HRESULT was 800706BA from line 44 of
| d:\nt\com\com1x\src\events\tie r1\eventsystemobj.ccp.
| Please contact Microsoft Product Support Services to
| report this error."
|
| Any help would be appreciated, Thank You