rpc service terminated unexpectedly?

[Guest]

Can anybody help? I just installed an earthlink accelerated program and started it, connected to the internet and got a virus notification which was caught by norton and then witihin under 3 minutes online get : NT Authority\System Remote Procdure Cell, service terminated unexpectedly. What does this mean? I don't get it when connected to compuserve, only the new earthlink???

 

[Jupiter Jones [MVP]]

It means you most likely caught Blaster on the unprotected computer.
Follow this to get rid of Blaster:
http://www3.telus.net/dandemar/blaster.htm

--
Jupiter Jones [MVP]
An easier way to read newsgroup messages:
http://www.microsoft.com/windowsxp/pro/using/newsgroups/setup.asp
http://www3.telus.net/dandemar/

Can anybody help? I just installed an earthlink accelerated program

and started it, connected to the internet and got a virus notification
which was caught by norton and then witihin under 3 minutes online get
: NT Authority\System Remote Procdure Cell, service terminated
unexpectedly. What does this mean? I don't get it when connected to
compuserve, only the new earthlink???

 

[Bruce Chambers]

Greetings --

If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

Removal Tool for Blaster/Nachi worm infections from computers running
Win2K or WinXP
http://support.microsoft.com/?kbid=833330

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

Can anybody help? I just installed an earthlink accelerated program

and started it, connected to the internet and got a virus notification
which was caught by norton and then witihin under 3 minutes online get
: NT Authority\System Remote Procdure Cell, service terminated
unexpectedly. What does this mean? I don't get it when connected to
compuserve, only the new earthlink???