RPC Service Error Reboots System

[Guest]

Computer was given to me with Windows XP Professional loaded on it. Tried to go on the internet to MSN and it wanted to download an update. After a few minutes I get an error that is initiated by NT Authority/System and Windows must be restarted because the Remote Procedure Service terminated unexpectedly. The system then counts down and reboots. How can I fix this?

Thanks,
Jennifer

 

[Carey Frisch [MVP]]

Apparently, your computer is infected with the W32.Blaster.Worm or one of its variants.
This happened because you have not been using an internet connection firewall and have
neglected to install the critical updates available at the Windows Update website.

What You Should Know About the Blaster Worm and Its Variants
http://www.microsoft.com/security/incident/blast.asp

Are you looking for info about the cause of "Remote Procedure Call (RPC)",
initiated by NT Authority\System error message that shuts down Windows
(you might also see svchost.exe error occasionally)?
http://www.faqs.org/rfcs/rfc1831.html

If you have AOL:

America Online installs its own connection settings that override
the ones that come with Windows XP. America Online's
connection settings don't include a way to turn on Windows XP's
built-in firewall.

Visit the following web site for instructions on downloading
a FREE firewall program for your computer.

Ref: http://www.updatexp.com/free.html

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

--------------------------------------------------------------------------------------------------------------
----


| Computer was given to me with Windows XP Professional loaded on it. Tried to go on the internet to MSN and
it wanted to download an update. After a few minutes I get an error that is initiated by NT Authority/System
and Windows must be restarted because the Remote Procedure Service terminated unexpectedly. The system then
counts down and reboots. How can I fix this?
|
| Thanks,
| Jennifer

 

[Jupiter Jones [MVP]]

Jennifer;
The computer most likely has Blaster.
Follow this to get rid of Blaster:
http://www3.telus.net/dandemar/blaster.htm

--
Jupiter Jones [MVP]
An easier way to read newsgroup messages:
http://www.microsoft.com/windowsxp/pro/using/newsgroups/setup.asp
http://www3.telus.net/dandemar/

Computer was given to me with Windows XP Professional loaded on it.

Tried to go on the internet to MSN and it wanted to download an
update. After a few minutes I get an error that is initiated by NT
Authority/System and Windows must be restarted because the Remote
Procedure Service terminated unexpectedly. The system then counts
down and reboots. How can I fix this?

 

[Bruce Chambers]

Greetings --

If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

Removal Tool for Blaster/Nachi worm infections from computers running
Win2K or WinXP
http://support.microsoft.com/?kbid=833330

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

Computer was given to me with Windows XP Professional loaded on it.

Tried to go on the internet to MSN and it wanted to download an
update. After a few minutes I get an error that is initiated by NT
Authority/System and Windows must be restarted because the Remote
Procedure Service terminated unexpectedly. The system then counts
down and reboots. How can I fix this?